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(54) METHOD AND DEVICE FOR ILLEGAL VIEWING/COPYING PREVENTION OF 
DIGITAL VIDEO SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To prevent illegal viewing and copying by transmitting a 
scrambled bit stream and the encrypted key used for the scrambling through mutually 
different pathsand descrambling the bit stream after decrypting the encrypted key 
with a smart card. 

SOLUTION: A demodulation and error correction part 1 performs demodulation and 
RS decoding for an analog broadcast signal. An ATV decoder 2 descrambles the 
output of the correction part 1 according to descrambling information. A copying 
preventive process part 4on the other handseparates a scrambled recording signal 
into a bit stream and a key streamand encrypts the key stream. Then the smart card 
3 decrypts the encrypted key stream separated by the process part 4 and the index 
code of the ATV decoder 2 and outputs descrambled information KS to the decoder 
2. Thereforeauthentication and key exchange are performed automatically to prevent 
illegal viewing and copying. 
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[Claim(s)] 

[Claim 1]A distinction stage which distinguishes whether scramble (scramble) of the 
data inputted was carried outlf distinguished from data by which scramble was carried 
out in said distinction stageafter dividing into a bit stream and a key stream said data 
by which scramble was carried outDecode a separated key streamdecipher key 
informationand descrambling (descramble) of said separated bit stream is carried out 
according to key informationlf distinguished from a regeneration stage displayed in a 
display deviceand data by which scramble was carried out in said distinction 
stageAccording to record or copying moderecord on a recording medium by data 
status with which a bit stream and a key stream were mixed and by which scramble 
was carried outorA recording level which is mixed with a bit stream and recorded on a 
recording medium after dividing into a bit stream and a key stream data by which 
scramble was carried out and enciphering a separated key streamlf distinguished from 
data by which scramble was carried out in said distinction stageafter dividing into a 
bit stream and a key stream data by which scramble was carried outDecrypt a key 
stream separated according to "PPC" mode or "backup copy (Back-up Copy)" mode 
to key information by the side of recordand transmitorlllegal viewing and listening and 
a copy prevention method of a digital video system consisting of a transmission stage 
of decrypting a separated key stream twice and transmitting it to own key information 
and key information by the side of recordand being able to perform simultaneous or 
selectively said regeneration stagea recording leveland a transmission stage. 
[Claim 2]Illegal viewing and listening and a copy prevention method of the digital video 
system according to claim 1 if distinguished from data by which scramble is not 
carried out in said distinction stagewherein data by which scramble is not carried out 
will not apply illegal viewing and listening and a copy preventing function. 
[Claim 3]Illegal viewing and listening and a copy prevention method of the digital video 
system according to claim 1 wherein said regeneration stage decrypts a separated key 
stream with a decryption algorithm to an MPEG bit stream and deciphers key 
information. 

[Claim 4]The 1st step where copying operation of said recording level enciphers a key 
stream to own key informationThe 2nd step that distinguishes whether a key stream 
enciphered in the 1 st step is in "PPC" modeor it is in "backup copy" modelf 
distinguished from "PPC" mode in said 2nd stepafter enciphering to key information 
by the side of record of a key stream decrypted and transmitted to key information 
by the side of recordThe 3rd step that is inserted in a position corresponding to an 
index codeand is recorded like a bit streamlf distinguished from "backup copy" mode 
in said 2nd stepit will encipher to key information by the side of record of a key 
stream decrypted and transmitted to own key information and key information by the 
side of recordlllegal viewing and listening and a copy prevention method of the digital 
video system according to claim 1 inserting in a position corresponding to an index 



codeand consisting of the 4th step recorded like a bit stream after decrypting to key 
information on the self. 

[Claim 5]The 1st transmission stage of inserting and transmitting an index code to a 
portion from which the key stream was separated after said 3rd~step "PPC" mode 
operation separates a bit stream and a key streamThe 2nd transmission stage of 
decrypting and transmitting a key stream separated in said 1st transmission stage to 
key information by the side of record after enciphering to own key informationAfter 
enciphering a key stream transmitted in said 2nd transmission stage to key 
information by the side of record corresponding to an index codelllegal viewing and 
listening and a copy prevention method of the digital video system according to claim 
4 consisting of a recording level which is mixed to a bit stream transmitted in said 1 st 
transmission stageand is recorded on a recording medium. 

[Claim 6] If it reproduces by completing record by said recording levelafter dividing a 
reproduced bit stream (S KS (BS)+E G (KS)) into a bit stream (S KS (BS)) and a key stream 
(E G (KS))A separation stage which inserts the index code IDX in a portion from which 
a key stream (E G (KS)) was separatedAn encryption stage which enciphers a key 
stream (E G (KS)) separated in said separation stage to own key informationA 
decipherment stage which deciphers key information by decrypting a key stream 
enciphered in said encryption stage to own key information and an MPEG bit 
streamlllegal viewing and listening and a copy prevention method of the digital video 
system according to claim 5 including a decryption stage which descrambles said 
separated bit stream (S KS (BS)) based on key information deciphered in said 
decipherment stage. 

[Claim 7]Said 4th~step "backup copy" mode operationThe 1st transmission stage of 
inserting and transmitting an index code to a portion from which the key stream was 
separated after separating a bit stream and a key streamThe 2nd transmission stage 
of decrypting and transmitting a key stream separated in said 1st transmission stage 
to key information by the side of record of an enciphered key streamand own key 
information after enciphering to own key informationA key stream transmitted in said 
2nd transmission stage is corresponded to an index codelllegal viewing and listening 
and a copy prevention method of the digital video system according to claim 4 mixing 
to a bit stream transmitted in said 1st transmission stageand consisting of a recording 
level recorded on a recording medium after enciphering to key information by the side 
of record. 

[Claim 8]If it reproduces by completing record by said recording levela reproduced bit 
stream (S KS (BS)+D SC AK [E G (KS)])After separating a bit stream (S KS (BS)) and a key 
stream (D SC AK [E G (KS)])A separation stage which inserts the index code IDX in a 
portion from which a key stream (D SC AK [E G (KS)]) was separatedln an encryption 
stage which enciphers a key stream (D SC AK [E G (KS)]) separated in said separation 
stage to own key informationand said encryption stageBy decrypting a key stream 
enciphered twice to own key information and an MPEG bit streamlllegal viewing and 



listening and a copy prevention method of the digital video system according to claim 
7 including a decipherment stage which deciphers key informationand a decryption 
stage which descrambles a separated bit stream (S KS (BS)) based on key information 
deciphered in said decipherment stage. 

[Claim 9]If data by which scramble was carried out is inputtedafter dividing into a bit 
stream and a key stream said data by which scramble was carried outDecode a 
separated key streamdecipher key informationand said separated bit stream is 
descrambled based on deciphered key informationBy a regeneration stage displayed in 
a display deviceand data status with which a bit stream and a key stream were mixed 
when data by which scramble was carried out was inputted and by which scramble 
was carried out. Illegal viewing and listening and a copy prevention method of a digital 
video system consisting of a recording level recorded on a recording mediumand being 
able to perform said regeneration stage and a recording level simultaneous or 
selectively. 

[Claim 10]It is the key information which said regeneration stage decoded a separated 
key stream with a decryption algorithm to an MPEG bit streamdeciphered key 
informationand was decipheredlllegal viewing and listening and a copy prevention 
method of the digital video system according to claim 9 distinguishing a descrambling 
method. 

[Claim 1 1]If it reproduces by completing record by said recording levelafter dividing a 
reproduced bit stream (S KS (BS)+E G (KS)) into a bit stream (S KS (BS)) and a key stream 
(E G (KS))A separation stage which inserts the index code IDX in a portion from which 
a key stream (E G (KS)) was separatedOwn key information is received in a key stream 
(E G (KS)) separated in said separation stageBy decrypting a key stream enciphered 
twice to own key information and an MPEG bit stream in an encryption stage 
enciphered by an encryption algorithmand said encryption stageBased on key 
information deciphered in a decipherment stage which deciphers key informationand 
said decipherment stagesaid separated bit stream (S KS (BS)) is descrambledlllegal 
viewing and listening and a copy prevention method of the digital video system 
according to claim 9 including a decryption stage displayed in a display device. 
[Claim 1 2]If a key stream enciphered to own key information at the time of a copy is 
transmittedA distinction stage which distinguishes whether it is in "backup copy" 
modeor it is in "PPC" modeThe 1st transmission stage of decrypting and transmitting 
said key stream to key information by the side of record if distinguished from the 
[PPC" mode in said distinction stageAfter enciphering to key information by the side 
of record of a key stream transmitted in said 1st transmission stagean enciphered key 
stream is inserted in a position corresponding to an index codelf distinguished from 
"backup copy" mode in the 1 st recording level recorded on a recording medium like a 
bit streamand said distinction stageThe 2nd transmission stage of decrypting a key 
stream twice and transmitting it to own key information and key information by the 
side of recordAfter enciphering a key stream transmitted in said 2nd transmission 



stage to key information by the side of recordlllegal viewing and listening and a copy 
prevention method of a digital video system which are characterized by the 2nd 
recording level that inserts an enciphered key stream in a position corresponding to 
an index codeand is recorded on a recording medium like a bit streamand a thing** 
and others. 

[Claim 13]Illegal viewing and listening and a copy prevention method of the digital 
video system according to claim 12 transmitting it after said 1st transmission stage 
decrypts a key stream enciphered to the own key information Ak to the own key 
information Ak and decrypts it to key information aluminum by the side of record 
further. 

[Claim 14]Said 2nd transmission stage a key stream enciphered to the own key 
information Aklllegal viewing and listening and a copy prevention method of the digital 
video system according to claim 12 transmitting after decrypting twice to the own key 
information Ak and decrypting to key information aluminum by the side of record 
further. 

[Claim 15]If a key stream (E G (KS)) is detected at the time of reproduction of a 
recording mediumit will distinguish from the "PPC" recording mediumAfter 
enciphering a key stream to own key informationdecode for own key information and 
key information is decipheredA "PPC" mode reproduction stage which descrambles a 
bit stream using key information and an index code which were decipheredlf a key 
stream (D SC AK [E G (KS)]) decrypted to own key information at the time of reproduction 
of a recording medium is detectedAfter distinguishing from a "backup copy" recording 
medium and enciphering twice to key information by the side of self and recordlllegal 
viewing and listening and a copy prevention method of a digital video system decoding 
for own key informationdeciphering key informationand consisting of deciphered key 
information and a "backup copy" mode reproduction stage which descrambles a bit 
stream using an index code. 

[Claim 16]A recovery and an error correction means which carry out the strange 
recovery of the analog broadcasting signaland carry out RS decodingAfter dividing 
into a bit stream and a key stream a record signal which transmits said recovery and 
an output of an error correction means to record/playback equipmentand is 
reproduced with its record/playback equipment and by which scramble was carried 
outA copy preventing process means to encipher a separated key streamand a 
decoder means to descramble a bit stream outputted from said recovery and an error 
correction meansor a copy preventing process means based on descrambling 
informationlllegal viewing and listening and a copy arrester of a digital video system 
having decoded a key stream enciphered by said copy preventing process meansand 
constituting from a smart means to output to said decoder means as descrambling 
information. 

[Claim 1 7]A decoder means by which said recovery and an error correction means 
were connected is connected to a smart meansBy decoding a key stream of said 



decoder means for own key information with said smart cardand outputting 
descrambling information to said decoder meanslllegal viewing and listening and a 
copy arrester of the digital video system according to claim 1 6 constituting so that an 
illegal viewing-and-listening preventing function may be performed. 
[Claim 18]Illegal viewing and listening and a copy arrester of the digital video system 
according to claim 16 recording only after connecting to digital recording/playback 
equipment a copy preventing process means by which said recovery and an error 
correction means were connected. 

[Claim 1 9]While connecting with a smart carda key stream line of a copy prevention 
means where said digital recording/playback equipment were connectedConnect a bit 
stream line to a decoder meansand said copy preventing process means and a 
decoder means are connectedWhen said smart card decodes a key stream of said 
copy preventing process means corresponding to an index code of said decoder 
means for own key information and outputs to said decoder means. Illegal viewing and 
listening and a copy arrester of the digital video system according to claim 16 
preventing illegal reproduction. 

[Claim 20]Said copy preventing process means enciphers a key stream separated 
from regenerative data of digital recording/playback equipment at the time of 
recording-medium reproduction in "PPC" mode for own key information. Illegal 
viewing and listening and a copy arrester of the digital video system according to 
claim 1 9 transmitting to a smart card. 

[Claim 21]Said copy preventing process means enciphers twice a key stream 
separated from regenerative data of digital recording/playback equipment at the time 
of reproduction medium reproduction in "backup copy" mode for own key 
informationand it transmits to a smart cardlllegal viewing and listening and a copy 
arrester of the digital video system according to claim 19 by which it is characterized. 
[Claim 22]RAM which memorizes key information that said copy preventing process 
means is peculiar to a smart cardAn algorithm storage memory which stores an 
encryption algorithmClaim 1 6 consisting of a processor which executes an enciphered 
program of said algorithm storage memory for key information on said RAMI 8 or a 
digital video system indicated to either of Claim 19and a copy arrester. 
[Claim 23]The 1st algorithm storage memory in which said smart card stores a 
decryption algorithm program for bit SUTORIMUThe 2nd algorithm storage memory 
which stores an own decryption algorithm programlllegal viewing and listening and a 
copy arrester of a digital video system given in either Claim 1 6 constituting from a 
ROM which stores own key informationand RAM which carries out temporary storage 
of the key information on other smart cards17 or Claim 19. 

[Claim 24]A 1st copy preventing process means to encipher a separated key stream 
after dividing regenerative data of the 1st digital recording / playback equipment into 
a bit stream and a key streamThe 1 st and 2nd smart card that decrypts a key stream 
enciphered by said 1st copy preventing process means to own key information and 



key information by the side of recordAfter enciphering a key stream of said 1 st smart 
card transmitted via said 2nd smart card for own key informationwith a bit stream 
from which an enciphered key stream was separated. A 2nd copy preventing process 
means to output to the 2nd digital recording / playback equipmentand to record on a 
recording mediumillegal viewing and listening of a digital video system ** 
constitutingand a copy arrester. 

[Claim 25]Illegal viewing and listening and a copy arrester of the digital video system 
according to claim 24 transmitting it to the 1st smart card after said 1st copy 
preventing process means enciphers a key stream to the own key information Ak. 
[Claim 26]When said 1 st smart card is in "PPC" modeafter decrypting a key stream 
of the 1st copy preventing process means to own key information and key information 
by the side of recordlllegal viewing and listening and a copy arrester of the digital 
video system according to claim 24 transmitting to the 2nd smart card. 
[Claim 27]Illegal viewing and listening and a copy arrester of the digital video system 
according to claim 24 mixing it with a bit stream of the 1 st copy preventing process 
means after said 2nd copy preventing process means enciphers a key stream 
transmitted with the 2nd smart card to own key information aluminum. 
[Claim 28]When said 1st smart card is in "backup copy" modelllegal viewing and 
listening and a copy arrester of the digital video system according to claim 24 which 
are characterized by decoding to key information by the side of record after decoding 
a key stream of the 1 st copy preventing process means twice to own key information. 
[Claim 29]Illegal viewing and listening and a copy arrester of the digital video system 
according to claim 24wherein said 2nd copy preventing process means enciphers a 
key stream transmitted from the 2nd smart card to own key information and mixes 
the enciphered key stream with a bit stream. 

[Claim 30]Illegal viewing and listening and a copy arrester of the digital video system 
according to claim 24 characterized by comprising the following. 
RAM which stores key information that said 1st and 2nd copy preventing process 
means is peculiar to a smart card. 

A processor which executes an enciphered program of said algorithm storage memory 
using an algorithm storage memory which stores an encryption algorithmand key 
information on said RAM. 

[Claim 31]The 1st algorithm storage memory in which said 1st and 2nd smart card 
stores a decryption algorithm program for a bit streamlllegal viewing and listening and 
a copy arrester of the digital video system according to claim 24 constituting from a 
2nd algorithm storage memory which stores an own decryption algorithm programa 
ROM which stores own key informationand RAM which carries out temporary storage 
of other smart key information. 
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[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention relates to illegal viewing and listening of a digital 
video systemand copy prevention art. By decoding the key stream separated by 
introducing especially a smart cardand setting up a descrambling methodit is related 
with illegal viewing-and-listening / copy prevention method and the device of a digital 
video system which prevent illegal viewing and listening and a copy of an unapproved 
user. 
[0002] 

[Description of the Prior Art]Concern is concentrating on the embodiment of a 
Conditional Access (henceforth CA) system by the common digital video system for 
the prevention from illegal viewing and listening. 

[0003]It is formal by broadcasting such a CA system with the gestalt by which 
scramble was carried out in the broadcasting signal by charged channelssuch as a 
cable TV and satellite broadcastingand only the user who paid money enables it to 
view and listen to a broadcast program to ** via descrambling. For examplethe 
satellite broadcasting receiver or the GrandAllinace (henceforth GA) system of a U.S. 
ATV standard has a function for supporting CA. 

Scrambling / descrambling device used for satellite broadcasting like the video code 
(Video Cipher) of GI were also already daily-use-ized. 

[0004]The scrambling system for a common CA system is a video code (Video 
Cipher) system of GI. 

If this carries out the scramble of the television signal transmitted to a regular 
member's descrambler by a charged TV system and broadcasts it on the basis of the 
U.S.Pat.No.4613901 patent of Gilhousenlt is the system and method of descrambling 
selectively by a regular member's descrambler. 

[0005]And what introduced and embodied the smart card to the video code (Video 
Cipher) system which performs descrambling is U.S.Pat.No.51 1 1504This the system of 
Gilhousen like "the information processor (Information Processor)" applicable to a 
descramblerand "a smart code (smart card)." It divides into "the protection element 
(Security Element)" for which it can substitute twoand embodies in it. 
[0006]Thereforeif a scrambling system is embodied like drawing 1 with the application 
of said methoda descrambling system will be embodied like drawing 2 . 
[0007]Namelythe illegal viewing-and-listening arrester of the conventional digital 
video systemThe scramble of the television signal Vi is carried out according to 
general standard information (Common Category Key) CK and initialization vector 
(Initialization Vector) PKThe television signal SVo by which scramble was carried 



outand the scrambler 101 which outputs scrambling information (E utD) E u (s) (CK)E CK 
(PK))The smart card 103 which enciphers the information (A (D)A (S)) for 
descrambling to descrambling information (U (S)) (Encryption)The information (EA (D) 
[EA (S) (WK)]) for descrambling of this smart card 103 is decoded (Decryption). It 
comprises the information processor 102 restored to the original television signal DVo 
by descrambling the transmission television signal SVo of said scrambler 101. A (D) is 
an attestation key (Authentication Key) of the information processor 102 hereA (S) is 
an attestation key of the smart card 103U (D) is the unit key (Unit Key) of said 
information processor 102and U (S) is an unit key of said smart card 103. 
[0008]Under the present circumstancesthe 1st encryption machine 1 1 1 with which 
said scrambler 101 enciphers general key CK to the information (U (D) U (S)) for 
descramblingThe 2nd encryption machine 112 which enciphers initialization vector PK 
to general key CKIt comprises the 3rd encryption machine 113 which enciphers 
initialization vector PK to output E CK (PK) of said 2nd encryption machine 1 12and the 
scrambling execution end 114 which carries out the scramble of the television signal 
Vi according to the output WK of said 3rd encryption machine 113. 
[0009]Hereafterthe process of a device of operation is explained conventionally which 
was constituted in this way. 

[0010]When it is going to transmit a television signal by Transmission Systems 
Divisionthe scrambler 101 general standard information (Common Category Key) CK 
with the 1st encryption machine 111 Firstthe information (U (D)) for 
descramblingEncipher to (U(S)) and initialization vector information (Initialization 
Vector) PK is enciphered to general standard information CK by the 2nd encryption 
1 12Initialization vector information PK is enciphered to the output (E CK (PK)) of said 
2nd encryption machine 112 with the 3rd encryption machine 1 13and it outputs to the 
scrambling processing end 114. Under the present circumstancesthe scrambling 
processing end 114 carries out the scramble of the television signal Vi on the basis of 
the output WK of the 3rd code machine 113. Herethe scrambling information WK 
appears in E ECK(PK) (PK). 

[001 1]Encipherment information [ as opposed to / by this / general standard 
information CK in the scrambler 101 ] (E U(D) E u (s) (CK))The encipherment information 
(E CK (PK)) over initialization vector information PK and the television signal SVo by 
which scramble was carried out will be transmitted to the information processor 102. 
[0012]When the television signal SVo by which scramble was carried out is 
descrambled on the other handAfter the smart card 103 enciphers the information WK 
required for descrambling to the certification information (A (D)) of the information 
processor 102and own certification information (A (S))The enciphered descrambling 
information (E A(D) [E A(S) (WK)]) is outputted to the information processor 102. 
[0013]The information processor 102 decodes the enciphered information (E A(D) [E A(S) 
(WK)]) which was outputted from the smart card 103 by thislt will restore to the 
original television signal DVo by descrambling the television signal SVo transmitted 



from SUKUNRABURA 101 using this. 

[0014]Hereit is for improving security nature from illegal viewing and listening and a 
copy to apply encryption (Encryption) to the information transmission between the 
information processor 1 02 and the smart card 1 03. 

[0015]For examplethe items (spec.) of a GA (Grand Alliance) high-definition TV 
system support a CA systemand the function required for a transmission protocol is 
embodied. In the meaning of supporting all the usable descrambling methods and the 
key encryption (Key Encryption) methodsthe function embodied by this system is 
flexible (Flexible). 

It is usefuland the scramble of the bit stream can be carried out selectivelyand the 
flexibility (Flexibility) which can apply CA function per element stream is secured. 
Herescrambling means the process changed in order to mean making a data bit 
stream into irregularity (Random) and to protect information data from the 
conversion-to-its-own-use person who enciphers (Encryption) based on information 
data. That isa CA system makes irregular the data transmitted using a scramblerWhile 
preventing from decoding to ** the decoder by the side of the conversion-to-its- 
own-use person who is going to view and listen to TV broadcast without noticeThe 
decoder of the users to whom TV broadcast was permitted enables it to decode in 
normal the TV broadcast signal received by providing the information which formats a 
descrambler circuit. 

[0016]Being able to embody the transmission protocol of MPEG for said operation in 
a format like drawing 3 such a transmission protocol has the two characteristics which 
support CA function. 

[001 7]It tells whether the scramble of the 1st2~bit Transport-scrambling-control 
filled **and the transmission stream was carried outand what kind of scrambling key 
when scramble was carried outwas used. 

[0018]The enciphered scrambling information is stored in such FIRUDO by the 
function which inserts each data into GA Transmission Systems Division using 
Transport-private-date FIRUDO in the adaptation (Adaptation) header of the 2nd 
transmission stream. 

[0019]the transmission protocol of MPEG like drawing 3 which has said characteristic 
— a transmission header and a PES (Packetized Elementary Stream) header — 
andalthough an audio and a video data are transmitted respectively or simultaneous 
succeedinglyA transmission header comprises a ring header (Link Header)an 
adaptation headerand a play load (playload) field. 

[0020]Herelink header (Link header) has a length of 4 bytesand length with a variable 
adaptation header. 

[0021]Transport-scrambling-control FIRUDO is inserted in said link headerlf the value 
of this FIRUDO is "00"they are Not-Scrambled and "10"they are the Even key and 
"11" and they are the Odd key and "01 "it will be recognized to be Reserved. 
[0022]And a flag bit and Transport-private-data FIRUDO are contained in an 



adaptation headerand a 1-bit Transport-private-data flag is included in said flag bit. 
The PES header of the transmission protocol of MPEG like drawing 3 is constituted 
like drawing 4 . 

[0023]Although FIRUDO for digital storage DSM like digital VCR exists in this PES 
headerit is constituted including PES HEDDAFIRUDO which has a PES header flag 
field which has the length of 14 bits of such filled **and variable length. 
[0024]In said PES header flag fieldit constitutes including 1 bit CR (Copyright) flagl 
bit OC (original-or-copy) flag2 bits PD flagl bit TM flagand 1-bit AC flag. 
[0025]and PES header filled ** — it has variable length and a partial area is set up by 
PD and TM which were contained to the PES header flag fieldand AC flag. Namelywith 
a PES header flag a PTS/DTS fieldlf the value of PD flag is "00"do not existbut if it 
is "10"40 bitslf it is "11 "will become 80 bitsand if the value of a DSM Trick Mode 
filled ** TM flag is "0"it does not existlt should be 8 bitswhen it will become 8 bits 
and an Additional Copy Info, filled ** AC flag will be set with "1 "if it is "1." 
[0026]Scrambling information was transmitted and by applying such a format showed 
the process descrambled using this information to drawing 5 . 
[0027] Herewith the key by which the descrambling system is used for the present 
descramblingthe key as which the next was enciphered should be decoded and the 
descrambler must store 2the "Odd key" and the "Even key." And the scrambling 
system must set and transmit the value of transport-scrambling-control FIRUDO in a 
link header with the method by which the present transmission stream is descrambled. 
[0028] By thisa descrambler will descramble and decode received dataafter 
distinguishing the "Even or Odd" key with the value of Transport-scrambling-control 
FIRUDO of the transmission header decoded with received data. 
[0029]With namelythe value of Transport-scranmbling-control FIRUDO which the data 
of a format like drawing 5 was transmitted and was decoded with the smart card. 
When the descrambler is descrambling the frame of eye K 2rr1 watch by the Odd keyA 
smart card decodes Transport-scrambling-control FIRUDO with the frame of eye K 2n 
watch descrambled nextand such operation is performed one by one. 
[0030]on the other handthe ATV decoder which performs CA function is embodied 
like drawing 6 although things can be carried outSuch an ATV decoder 110 will build 
the descrambler which needs high speed operation in the transmission demultiplexer 
105and a DES algorithmthe stream SAIPA (Stream Cipher) algorithm using PN 
sequenceetc. will perform descramblingThe key (Encrypted Key) enciphered by this 
ATV decoder 1 10 is decrypted with the smart card 103 (Decryption). 
[0031]Herethe interface of the smart card 103 and the ATV decoder 1 10 is made by 
ISO-7816 standards etc. 

[0032]That isafter the signal received with the tuner gets over by a recovery and the 
error correcting section 104the error generated at the time of transmission is 
corrected via RS decodingand working example of drawing 6 is inputted into the 
transmission demultiplexer 105 of the ATV decoder 110and is descrambled. 



[0033]Under the present circumstancesthe microcontroller 109 calculates the control 
signal and data which were descrambledtransmits the encipherment information for 
descrambling to the smart card 103and said smart card 103 decodes the transmitted 
encipherment informationand it transmits it to the ATV decoder 1 1 0. Under the 
present circumstancesthe transmission JIMARUCHI plexor 105 will restore a 
compression video signala compression audio signala control signaland data based on 
descrambling information. Therebyafter the video decoder's 107 elongating and making 
a note of a compression audio signal and carrying out temporary storage to 106the 
storage data is outputtedan image is displayedand the audio decoder 108 elongates a 
compression audio signaland reproduces an audio. The microcontroller 109 deciphers 
the control signal and data which were outputted from the transmission JIMARUCHI 
plexor 105and controls operation of said video decoder 107 and the audio decoder 
108. 

[0034]On the other handa block SAIPA (Block-cipher) algorithm like DES and the 
stream SAIPA (Stream-cipher) algorithm using PN sequence are used general most 
widely in the various methods used for encryption. Howeversince even a 
cryptographic key performs encryption and decryption with a chiselkey management 
(Key Management) and key distribution (Key Distribution) are difficult for such a 
method. 

[0035]Thereforea public key (Public-Key) cipher system like U.S.Pat.No.4200770 was 
proposed as solution to this. This method enciphers using the public key which is an 
exhibited keyand decodes by an own secret key (Secret key). And U.S.Pat.No.4405829 
has improved such a public key encryption-ized methodembodied with the encryption 
systemand it is known as an RSA encryption algorithm. 
[0036] 

[Problem(s) to be Solved by the Invention]Howeversaid public key encryption-ized 
method has the demerit of being unsuitable in high-speed encryption. Although the 
CA system aimed at preventing illegal viewing and listeningto the program distributed 
via DSM like digital VCRthere was no method of protecting against an illegal copy. 
[0037]Namelyalthough the protection to the program supplied by a recording medium 
like DSM means prevention of an illegal copyBeing hard to apply the copy prevention 
(Copy Protection) method applied to the existing analog VCR system to the storage 
of a digital systemthe research to the copy preventing system for DSM is not 
independently progressing until now. 

[0038]Thereforeare for this invention solving this problemand the purposeThe bit 
stream by which scramble was carried outand the enciphered key which were used for 
scrambling are transmitted in a mutually different courseBy descrambling a bit stream 
and preventing from performing normal decoding only at a bit stream based on the 
informationafter decoding the enciphered key with a smart cardlt is in providing illegal 
viewing and listening and the copy prevention method of the digital video system 
which prevents illegal viewing and listening and a copy. 



[0039]Such this invention makes a PPV (Pay Per View) function much more powerful 
including the function which introduces a smart card with a CA system and checks a 
fee automatically (checking)By adding various functions by substitution of a smart 
cardupgrade (Upgrade) of the system performance can be carried out easily. 
[0040]Since this invention can carry out sharp reduction of the key daily dose of the 
data protected since transmission data is separated and attestation and a key 
exchange process are automatically performed at the time of connection between 
digital VCR for the time of power-onor recordinglt does not operate and the reliability 
of a protection feature is made to improve further in an illegal smart card. 
[0041] 

[Means for Solving the Problem]Illegal viewing and listening and a copy prevention 
method of a digital video system by this inventionA distinction stage which 
distinguishes whether scramble (scramble) of the data inputted was carried outlf 
distinguished from data by which scramble was carried out in said distinction 
stageafter dividing into a bit stream and a key stream said data by which scramble 
was carried outDecode a separated key streamdecipher key informationand 
descrambling (descramble) of said separated bit stream is carried out according to 
key informationlf distinguished from a regeneration stage displayed in a display 
deviceand data by which scramble was carried out in said distinction stageRecord on 
a recording medium by data status with which a bit stream and a key stream were 
mixed according to record or copying mode and by which scramble was carried 
outorA recording level which is mixed with a bit stream and recorded on a recording 
medium after dividing into a bit stream and a key stream data by which scramble was 
carried out and enciphering a separated key streamlf distinguished from data by which 
scramble was carried out in said distinction stageafter dividing into a bit stream and a 
key stream data by which scramble was carried outDecrypt a key stream separated 
according to "PPC" mode or "backup copy (Back-up Copy)" mode to key information 
by the side of recordand transmitorlt consists of a transmission stage of decrypting a 
separated key stream twice and transmitting it to own key information and key 
information by the side of recordand said regeneration stagea recording leveland a 
transmission stage can be performed simultaneous or selectivelyand the above- 
mentioned purpose is attained by that. 

[0042] According to a certain embodimentif distinguished from data by which scramble 
is not carried out in said distinction stagedata by which scramble is not carried out 
will not apply illegal viewing and listening and a copy preventing function. 
[0043]According to a certain embodimentsaid regeneration stage decrypts a 
separated key stream with a decryption algorithm to an MPEG bit streamand 
deciphers key information. In a certain embodimentcopying operation of said recording 
levelThe 1st step that enciphers a key stream to own key informationand the 2nd 
step that distinguishes whether a key stream enciphered in the 1 st step is in "PPC" 
modeor it is in "backup copy" modelf distinguished from "PPC" mode in said 2nd 



stepafter enciphering to key information by the side of record of a key stream 
decrypted and transmitted to key information by the side of recordThe 3rd step that 
is inserted in a position corresponding to an index codeand is recorded like a bit 
streamlf distinguished from "backup copy" mode in said 2nd stepit will encipher to 
key information by the side of record of a key stream decrypted and transmitted to 
own key information and key information by the side of recordAfter decrypting to key 
information on the selfit inserts in a position corresponding to an index codeand is 
that it is ****** with the 4th step recorded like a bit stream. 
[0044]In a certain embodimentsaid 3rd-step "PPC" mode operationThe 1st 
transmission stage of inserting and transmitting an index code to a portion from which 
the key stream was separated after separating a bit stream and a key streamThe 2nd 
transmission stage of decrypting and transmitting a key stream separated in said 1st 
transmission stage to key information by the side of record after enciphering to own 
key informationA recording level which is mixed to a bit stream transmitted in said 1st 
transmission stageand is recorded on a recording medium after enciphering a key 
stream transmitted in said 2nd transmission stage to key information by the side of 
record corresponding to an index codelf it reproduces by completing record according 
to said recording level in a certain embodiment which is that it is ******After dividing 
a reproduced bit stream (S KS (BS)+E G (KS)) into a bit stream (S KS (BS)) and a key 
stream (E G (KS))A separation stage which inserts the index code IDX in a portion from 
which a key stream (E G (KS)) was separatedand an encryption stage which enciphers 
a key stream (E G (KS)) separated in said separation stage to own key informationA 
decipherment stage which deciphers key information by decrypting a key stream 
enciphered in said encryption stage to own key information and an MPEG bit streamA 
decryption stage which descrambles said separated bit stream (S KS (BS)) based on 
key information deciphered in said decipherment stage is included. 
[0045]In a certain embodimentsaid 4th-step "backup copy" mode operationThe 1st 
transmission stage of inserting and transmitting an index code to a portion from which 
the key stream was separated after separating a bit stream and a key streamThe 2nd 
transmission stage of decrypting and transmitting a key stream separated in said 1st 
transmission stage to key information by the side of record of an enciphered key 
streamand own key information after enciphering to own key informationAfter 
enciphering a key stream transmitted in said 2nd transmission stage to key 
information by the side of record corresponding to an index codeit mixes to a bit 
stream transmitted in said 1st transmission stageand is that it is ****** with a 
recording level recorded on a recording medium. 

[0046]If it reproduces by completing record according to said recording level in a 
certain embodimenta reproduced bit stream (S KS (BS)+D SC AK [E G (KS)])After separating 
a bit stream (S KS (BS)) and a key stream (D SC AK [E G (KS)])A separation stage which 
inserts the index code IDX in a portion from which a key stream (D SC AK [E G (KS)]) was 
separatedln an encryption stage which enciphers twice a key stream (D SC AK [E G (KS)]) 



separated in said separation stage to own key informationand said encryption stageBy 
decrypting a key stream enciphered twice to own key information and an MPEG bit 
streamA decipherment stage which deciphers key informationand a decryption stage 
which descrambles a separated bit stream (S KS (BS)) based on key information 
deciphered in said decipherment stage are included. 

[0047]Illegal viewing and listening and a copy prevention method of a digital video 
system by this inventionlf data by which scramble was carried out is inputtedafter 
dividing into a bit stream and a key stream said data by which scramble was carried 
outDecode a separated key streamdecipher key informationand said separated bit 
stream is descrambled based on deciphered key informationBy a regeneration stage 
displayed in a display deviceand data status with which a bit stream and a key stream 
were mixed when data by which scramble was carried out was inputted and by which 
scramble was carried out. It consists of a recording level recorded on a recording 
mediumsaid regeneration stage and a recording level can be performed simultaneous 
or selectivelyand the above-mentioned purpose is attained by that. 
[0048]According to a certain embodimentsaid regeneration stage decodes a separated 
key stream with a decryption algorithm to an MPEG bit streamdeciphers key 
informationis the deciphered key information and distinguishes a descrambling method. 
[0049]If it reproduces by completing record according to said recording level in a 
certain embodimentafter dividing a reproduced bit stream (S KS (BS)+E G (KS)) into a bit 
stream (S KS (BS)) and a key stream (E G (KS))A separation stage which inserts the 
index code IDX in a portion from which a key stream (E G (KS)) was separatedOwn key 
information is received in a key stream (E G (KS)) separated in said separation stageBy 
decrypting a key stream enciphered twice to own key information and an MPEG bit 
stream in an encryption stage enciphered by an encryption algorithmand said 
encryption stageA decipherment stage which deciphers key informationand a 
decryption stage which descrambles said separated bit stream (S KS (BS))and is 
displayed in a display device based on key information deciphered in said 
decipherment stage are included. 

[0050]Illegal viewing and listening and a copy prevention method of a digital video 
system by this inventionlf a key stream enciphered to own key information at the time 
of a copy is transmittedA distinction stage which distinguishes whether it is in 
"backup copy" modeor it is in "PPC" modeThe 1st transmission stage of decrypting 
and transmitting said key stream to key information by the side of record if 
distinguished from the [PPC" mode in said distinction stageAfter enciphering to key 
information by the side of record of a key stream transmitted in said 1st transmission 
stagean enciphered key stream is inserted in a position corresponding to an index 
codelf distinguished from "backup copy" mode in the 1st recording level recorded on 
a recording medium like a bit streamand said distinction stageThe 2nd transmission 
stage of decrypting a key stream twice and transmitting it to own key information and 
key information by the side of recordAfter enciphering a key stream transmitted in 



said 2nd transmission stage to key information by the side of recordAn enciphered 
key stream is inserted in a position corresponding to an index codeit is that it is 
****** with the 2nd recording level recorded on a recording medium like a bit 
streamand the above-mentioned purpose is attained by that. 
[0051] According to a certain embodimentsaid 1st transmission stage is 
transmittedafter decrypting a key stream enciphered to the own key information Ak 
to the own key information Ak and decrypting to key information aluminum by the side 
of record further. 

[0052]According to a certain embodimentsaid 2nd transmission stage is 
transmittedafter decrypting twice a key stream enciphered to the own key information 
Ak to the own key information Ak and decrypting it to key information aluminum by 
the side of record further. 

[0053]Illegal viewing and listening and a copy prevention method of a digital video 
system by this inventionlf a key stream (E G (KS)) is detected at the time of 
reproduction of a recording mediumit will distinguish from the "PPC" recording 
mediumAfter enciphering a key stream to own key informationdecode for own key 
information and key information is decipheredA "PPC" mode reproduction stage 
which descrambles a bit stream using key information and an index code which were 
decipheredlf a key stream (D SC AK [E G (KS)]) decrypted to own key information at the 
time of reproduction of a recording medium is detectedAfter distinguishing from a 
"backup copy" recording medium and enciphering twice to key information by the side 
of self and recordlt decodes for own key informationkey information is decipheredit is 
that it is ****** with deciphered key information and a "backup copy" mode 
reproduction stage which descrambles a bit stream using an index codeand the 
above-mentioned purpose is attained by that. 

[0054]Illegal viewing and listening and a copy arrester of a digital video system by this 
inventionA recovery and an error correction means which carry out the strange 
recovery of the analog broadcasting signaland carry out RS decodingAfter dividing 
into a bit stream and a key stream a record signal which transmits said recovery and 
an output of an error correction means to record/playback equipmentand is 
reproduced with its record/playback equipment and by which scramble was carried 
outA copy preventing process means to encipher a separated key streamand a 
decoder means to descramble a bit stream outputted from said recovery and an error 
correction meansor a copy preventing process means based on descrambling 
informationA key stream enciphered by said copy preventing process means is 
decodedit constitutes [ ** ] with a smart means to output to said decoder means as 
descrambling informationand the above-mentioned purpose is attained by that. 
[0055]In a certain embodimenta decoder means by which said recovery and an error 
correction means were connected is connected to a smart meansBy decoding a key 
stream of said decoder means for own key information with said smart cardand 
outputting descrambling information to said decoder meansit constitutes so that an 



illegal viewing-and-listening preventing function may be performed. 
[0056]According to a certain embodimenta copy preventing process means by which 
said recovery and an error correction means were connected records only after being 
connected to digital recording/playback equipment. 

[0057]While connecting to a smart card a key stream line of a copy prevention means 
where said digital recording/playback equipment were connected in a certain 
embodimenta bit stream line is connected to a decoder meanslllegal reproduction is 
preventedwhen said copy preventing process means and a decoder means are 
connectedand said smart card decodes a key stream of said copy preventing process 
means corresponding to an index code of said decoder means for own key information 
and outputs to said decoder means. 

[0058]According to a certain embodimentsaid copy preventing process means 
enciphers a key stream separated from regenerative data of digital 
recording/playback equipment at the time of recording-medium reproduction in 
"PPC" mode for own key informationand transmits it to a smart card. 
[0059]According to a certain embodimentsaid copy preventing process means 
enciphers twice for own key informationand transmits a key stream separated from 
regenerative data of digital recording/playback equipment at the time of reproduction 
medium reproduction in "backup copy" mode to a smart card. 
[0060]In a certain embodimentsaid copy preventing process meanslt is that it is 
****** with RAM which memorizes key information peculiar to a smart cardan 
algorithm storage memory which stores an encryption algorithmand a processor which 
executes an enciphered program of said algorithm storage memory for key information 
on said RAM. 

[0061]The 1st algorithm storage memory in which said smart card stores a decryption 
algorithm program for bit SUTORIMU in a certain embodimentlt constitutes [ ** ] with 
the 2nd algorithm storage memory which stores an own decryption algorithm 
programROM which stores own key informationand RAM which carries out temporary 
storage of the key information on other smart cards. 

[0062]Illegal viewing and listening and a copy arrester of a digital video system by this 
inventionA 1st copy preventing process means to encipher a separated key stream 
after dividing regenerative data of the 1st digital recording / playback equipment into 
a bit stream and a key streamThe 1st and 2nd smart card that decrypts a key stream 
enciphered by said 1st copy preventing process means to own key information and 
key information by the side of recordAfter enciphering a key stream of said 1st smart 
card transmitted via said 2nd smart card for own key informationwith a bit stream 
from which an enciphered key stream was separated. It outputs to the 2nd digital 
recording / playback equipmentand constitutes [ ** ] with a 2nd copy preventing 
process means to record on a recording mediumand the above-mentioned purpose is 
attained by that. 

[0063]According to a certain embodimentafter said 1st copy preventing process 



means enciphers a key stream to the own key information Akit is transmitted to the 
1 st smart card. 

[0064]According to a certain embodimentwhen it is [ said 1 st smart card ] in "PPC" 
modeafter decrypting a key stream of the 1st copy preventing process means to own 
key information and key information by the side of recordit is transmitted to the 2nd 
smart card. 

[0065]According to a certain embodimentsaid 2nd copy preventing process means 
mixes with a bit stream of the 1 st copy preventing process means a key stream 
transmitted with the 2nd smart cardafter enciphering to own key information 
aluminum. 

[0066]According to a certain embodimentwhen it is in "backup copy" modesaid 1st 
smart card decodes it to key information by the side of recordafter it decodes a key 
stream of the 1st copy preventing process means twice to own key information. 
[0067]According to a certain embodimentsaid 2nd copy preventing process means 
enciphers a key stream transmitted from the 2nd smart card to own key 
informationand mixes the enciphered key stream with a bit stream. 
[0068]In a certain embodimentsaid 1st and 2nd copy preventing process meanslt 
constitutes [ ** ] with RAM which stores key information peculiar to a smart cardan 
algorithm storage memory which stores an encryption algorithmand a processor which 
executes an enciphered program of said algorithm storage memory using key 
information on said RAM. 

[0069]In a certain embodimentsaid 1st and 2nd smart cardThe 1st algorithm storage 
memory which stores a decryption algorithm program for a bit streamlt constitutes 
[ ** ] with the 2nd algorithm storage memory which stores an own decryption 
algorithm programROM which stores own key informationand RAM which carries out 
temporary storage of other smart key information. 
[0070] 

[Embodiment of the Invention] Hereafterthis invention is explained in detail with 
reference to an accompanying drawing. 

[0071]This invention can be applied to all the record/playback equipment which can 
record and reproduce a digital signaland makes DVCR one working example in this 
invention for the facilities of explanation. 

[0072]Thereforethe recovery and the error correcting section 1 which carry out the 
strange recovery of the broadcasting signal of an analogand carry out RS decoding as 
working example of this invention is shown in drawing 7 The ATV decoder 2 which 
descrambles said recovery and the output of the error correcting section 1 based on 
descrambling informationThe copy preventing process part 4 which divides into a bit 
stream and a key stream the record signal by which scramble was carried outand 
enciphers the separated key streamlt constitutes from the smart card 3 which 
decodes the index code of the key stream separated and enciphered in this copy 
preventing process part 4and said ATV decoder 2and outputs the descrambling 



information KS to said ATV decoder 2. 

[0073]RAM17 in which said copy preventing process part 4 stores key information 
peculiar to a smart card as shown in drawing 8 It constitutes from the algorithm stores 
dept. 1 8 which stores an encryption algorithmand the processor 1 6 which executes 
the enciphered program of said algorithm stores dept. 18 for the key information on 
said RAMI 7. 

[0074]The 1 st algorithm stores dept. 1 2 in which said smart card 3 stores the 
decryption algorithm for a bit stream as shown in drawing 9 The 2nd algorithm stores 
dept. 13 which stores an own decryption algorithmROMH which stores own key 
informationand RAMI 5 which carry out temporary storage of the key information on 
other smart cardslt constitutes from the processor 1 1 which performs encryption or 
decryption to the key information stored in said ROM14 or RAMI 5 with the storage 
algorithm of said 1 st and 2nd algorithm stores depts 1 2 and 1 3. 
[0075]Under the present circumstanceswhen said processors 11 and 16 can be 
constituted from WAIYADO logic (Wired Logic)or can use a microprocessor and use a 
microprocessorthey will build in the encryption algorithm for a smart card by a 
program. 

[0076]Hereafterthe operation and the operation effect of this invention which were 
constituted in this way are explained. 

[0077]Although an MPEG bit stream is transmitted in drawing 1 1 (a) thru/or a format 
as shown in (c) by this invention Drawing 1 1 (a) is a format by which scramble is not 
carried ou tdrawing 1 1 (b) is the format by which scramble was carried out to the bit 
streamand drawing 1 1 (c) is the format to which the scramble of the bit stream was 
carried out selectively. 

[0078]In this inventionwhen scramble is carried out to an MPEG bit streamif 
protection (protection) is added with any gestaltena premise will be carried out. 
[0079]Thereforewhen the stream data (S KS (BS)+E G (KS)) in which the scramble of 
drawing 1 1 (b) or the format as shown in (c) was carried out to the copy preventing 
process part 4 are inputtedlf it separates into drawing 1 1 (d) thru/or a bit stream 
(S KS (BS)+IDX) as shown in (e)and a key stream (E G KS) by splitter (Splitter) as shown 
in drawing 10 and a recording mode is performedlt is enciphered further and said 
separated key stream (E G (KS)) is transmitted to the smart card 3. 
[0080]Heresince illegal viewing and listening and a copy preventing function are 
applied only to the portion by which scramble was carried out when the scramble of 
the bit stream is carried out selectively as shown in drawing 1 1 (c)a partial protection 
feature can be performed. 

[0081]Firstas shown in drawing 1 1 (a)when the bit stream by which scramble is not 
carried out is transmittedEven if the bit stream to which it strange-restored and 
which was decoded by the recovery and the error correcting section 1 is inputted into 
the copy preventing process part 4data is not transmitted to the smart card 3A bit 
stream is decoded without the ATV decoder 2 into which the bit stream of said 



recovery and the error correcting section 1 was inputted also transmitting data to 
said smart card 3. Thereforerestriction [ what ] is also lost to viewing and listening 
and a copy. 

[0082]The video and the audio signal which are outputted here from the signal 
inputted into a recovery and the error correcting section 1 from a tuner and the ATV 
decoder 2 are an analog signal. The signal outputted from a tuner is a signal by which 
VSB abnormal conditions were carried out from GA bit stream. And a bit stream and a 
key stream are the digital signals for digital DVCR among input output signals. Under 
the present circumstancesif it recordsa bit stream will be recorded on digital VCR and 
this recorded bit stream will be reproduced with general digital VCR. That issince 
there is no data transmitted to the smart card 3 in order that there may be no key 
informationeven if it passes a splitteras the MPEG bit stream which does not require 
scrambling is inputted into the copy preventing process part 4 and it is shown in 
drawing 1 0 When scrambling does not startany restriction cannot be found in viewing 
and listening and a copy. 

[0083]Separate into a bit stream and a key stream and this invention is transmitted 
with a line differentrespectivelywhen performing recording or a copy preventing 
functionbut. The information about a copy prevention method is carried and 
transmitted to addition copy information (Additional Copy Info.) FIRUDO in a PES 
header. 

[0084] Under the present circumstancessince it is in the state where the information 
about a key was removed even if it transmits the bit stream without the enciphered 
key by which scramble was carried out by a public channelwhen it flows into a 
conversion-to-its-own-use persondescrambling cannot be performed to **. And 
since it is enciphered further and the separated key is transmitteda bit stream cannot 
be descrambled when there is no decoding algorithm. Thereforealthough this invention 
uses arbitrary FIRUDO with an MPEG transmission protocol for starting illegal viewing 
and listening and the prevention from a copyas for the bit stream by which scramble 
was carried outa copy preventing function is applied. 

[0085]Firstby the decoder 2if it changes "Transport-scrambling-control filled" into 
"Not Scrambled" modesince descrambling is not performedthe conversion-to-his- 
own-use person cannot operate said FIRUDO. Since it determines it that whether 
copy prevention being made to be carried out by "Transport-scrambling-control 
filled" and a copy are possible (free-copy) for such a copy prevention method 
whether it is made to becomeOnly by operating this FIRUDOthe conversion-to-his- 
own-use person cannot cancel a copy preventing function. 

[0086] By nextthe way a conversion-to-his-own-use person corrects "addition copy 
information (Additional Copy Info.) filled" in a PES header. Since correction of this 
FIRUDO transforms a protective method and the protective method itself is not 
disassembledbig damage is not done to a copy preventing function. 
[0087]The copy prevention method supported by this invention which has such a 



featurePPV (Pay Per View) and the PPP (Pay Per Play) function which are CA 
functions are considered as the default (Default)and there are the "No Copy" 
methoda "PPC (Pay Per Copy)" methodand the "Back-up Copy" method. 
[0088]On other videotapesthe "No Copy" method is a copy the method of keeping 
from the ability to do at all hereand the "PPC" methodReceive a fee for every copy 
once and the "Back-up Copy" methodlt is a method which can display in normal the 
videotape copied when digital VCR by the side of other copied the videotape played 
with digital VCR by the side of one only with digital VCR by the side of oneand cannot 
be displayed in digital VCR by the side of other. 

[0089]Hereafterthe copy prevention method of this invention and the flow of the 
MPEG bit stream by it are explained with reference to drawing 1 9 t hru/or drawing 22 . 
[0090] Drawing 1 9 and 20 are the signal flow graphs to operation of a copy preventing 
process part at the time of record or reproduction mode Drawing 21 is a signal flow 
graph to operation of the smart card corresponding to said copy preventing process 
partand drawing 22 is a signal flow graph to record or the key exchange at the time of 
reproduction motionand an attestation process. 

[0091]Firstthe signal flow of drawing 1 9 is explained. The copy preventing process 
part 4 into which the bit stream was inputted checks the existence of key 
informationdistinguishes how of scramblingit has key informationand when scramble is 
carried outit distinguishes whether it is the first recording or it is copy recording 
(S101). 

[0092]Namelyin the case of the data by which scramble was carried outit is searched 
whether it is transmitted by the stream of a S KS (BS)+IDX gestalt by separation of a 
bit stream (S KS (BS)) and a key stream (E G (KS))If the stream of a S KS (BS)+IDX gestalt 
is detectedand it will distinguish from copy recording and will not be detectedit 
distinguishes from the first recording (S102). 

[0093]By thiswhen distinguished from recording at firstthe stream (S KS (BS)+E G (KS)) 
with which the bit stream and the key stream were mixed by VCR5 is recorded on a 
tape (S106)When distinguished from copy recordingwhile a key stream (E G (KS)) 
transmits the separated bit stream (S KS (BS)+IDX) to the copy preventing process part 
8 by the side of recordThe key information Ak is received in said key stream (E G 
(KS))After enciphering furthermore (S105)it will record on a tape by VCR9 by the side 
of record by transmitting the enciphered key stream (E^ [E G (KS)]) to the smart 
card 7 by the side of record via the smart card 3 (S106). 

[0094] On the contrary drawing 20 is a signal flow graph in the case of playing the tape 
which recorded by a signal flow like drawing 19 . The copy preventing process part 4 
will distinguish whether (S108) and a recording function are "Back-up Copy" by 
separating and distinguishing a key streamwhen the bit stream reproduced with VCR 
is inputted (S107) (S110). 

[0095]Under the present circumstancessaid stage (S1 10) will be distinguished from a 
recording tape at firstif there is no key informationit distinguishes from a common 



recording tape and the enciphered key stream (E G (KS)) is detected. If the key stream 
(D sc Ak [E G (KS)]) decoded to the own key information Ak is detectedlt distinguishes 
from the recording tape of a PPC functionand if the key stream (D SC AI [E G (KS)]) 
decoded to key information aluminum of other smart cards is detectedit will 
distinguish from the recording tape of the "Back-up Copy" function. By thiswhen 
general ** is a tapethe copy preventing process part 4The bit stream (S KS (BS)+IDX) 
from which the bit stream (BS) was separated in the key stream (E G (KS)) in the case 
of the recording tape for copy prevention is transmitted to the decoder 2 (S109). 
[0096]And when a Back-up Copy function is applied to the copy preventing process 
part 4 at the time of playback of the recording tape for copy preventionBy 
enciphering twice by encryption algorithm E sc Ak (-) to the own key information Aka 
key stream (D sc Ak [E G (KS)])The enciphered key stream (E sc Ak [E G (KS)]) is transmitted 
to the smart card 3 (S1 1 1S1 12S1 13)When the Back-up Copy function is not 
appliedKeast RIMUMU (E G (KS)) by enciphering by an encryption algorithm (E sc Ak (-)) 
to the own key information AkThe enciphered key stream (E sc Ak [E G (KS)]) is 
transmitted to the smart card 3 (S1 12S1 13). 

[0097]When performing the above operations in the copy preventing process part 
4the smart card 3 operates a signal flow like drawing 21 . If this is explained in 
detailsaid smart card 3 will distinguish whether the index code IDX or a key stream 
(E G (KS)) is inputted by the decoder 2 by performing broadcast or reproduction 
(S114S115). 

[0098]Under the present circumstancesthe smart card 3 distinguished from broadcast 
viewing and listening of the PPV function when the key stream (E G (KS)) which is not 
the index code IDX was inputtedSaid key stream (E G (KS)) is decoded by decryption 
algorithm D G (-) to the bit stream GA (S1 16)and the key information KS is made to 
input into the decoder 2 (S1 17). By thisthe decoder 2 deciphers the key information 
KS on the smart card 3and distinguishes a descrambling methodBy descrambling a bit 
stream (S KS (BS)) and outputting as an analog video signal and an audio signal by the 
distinguished descrambling methodthe televiewer can view and listen to broadcast. 
[0099]On the other handif it is distinguished that the index code IDX was inputted in 
said stage (S1 15)After the smart card 3 decodes the key stream (E sc Ak [E G (KS)]) 
inputted in the copy preventing process part 4 with a decryption algorithm (D sc Ak (-)) 
to the key information Ak (S1 1 8)reproduction motion — or recording operation is 
distinguished (S119). 

[0100]Under the present circumstancesif distinguished from reproduction motion in 
said stage (S1 19)the smart card 3 will decode the decrypted key stream (E G (KS)) 
with the decryption algorithm (D G (-)) to the bit stream GA (S1 16)The key information 
KS is made to input into the decoder 2 (S1 17). The decoder 2 deciphers the key 
information KS on the smart card 3 by thisDistinguish a descrambling method and the 
bit stream (S KS (BS)) separated in the copy preventing process part 4 by the 
distinguished descrambling method is descrambledBy outputting an analog video signal 



and an audio signalthe televiewer can view and listen to the recording program of a 
tape. 

[0101]And if distinguished from recording operation in said stage (S1 19)it will be 
distinguished whether the smart card 3 is the "Back-up Copy" function (S120). If it is 
the "Back-up Copy" functionthe key information Ak is received in a key stream (E G 
(KS))The key stream (D sc Ak [E G (KS)]) (to key information aluminum) which decrypted 
with the decryption algorithm (D sc Ak (-)) (S121)and was decrypted It will decrypt with 
a decryption algorithm (D sc Ak (-)) (S122). 

[0102]Under the present circumstancesthe key stream (D SC AI {D sc Ak [E G (KS)]}) 
decrypted with the smart card 3 is transmitted to the record side (S123)If inputted 
into the copy preventing process part 8 via the smart card 7 (S124)it will be 
enciphered by an encryption algorithm (E SC AI (-)). By thislf the smart card 7 is mixed 
with the bit stream (S KS (BS)) which made mix the enciphered key stream (D sc Ak [E G 
(KS)]) in the position specified by the index code IDXand was outputted from the 
copy preventing process part 4 by the side of reproductionlt will record on a tape by 
VCR9. 

[0103]On the other handif it is distinguished from recording operation in said stage 
(S1 19) and it is distinguished that the PPC function which is not the "Back-up Copy" 
function in said stage (S120) was appliedThe smart card 3 decrypts a key stream (E G 
(KS)) with a decryption algorithm (D SC AI (-)) to key information aluminum (S122)The 
decrypted key stream (D SC AI [E G (KS)]) will be transmitted to the record side (S123). 
[0104]Under the present circumstancesthe copy preventing process part 8 by the 
side of the record which received the input of the key stream (D SC AI [E G (KS)]) via the 
smart card 7After enciphering by encryption algorithm E SC AI (-)The enciphered key 
stream (E G (KS)) will be made to mix in the position specified by the index code 
IDXand it will mix with the bit stream (S KS (BS)) outputted from the copy preventing 
process part 4 by the side of reproduction. 

[0105]Thereforethe bit stream (S KS (BS)+E G (KS)) outputted from the copy preventing 
process part 8 is recorded on a tape by VCR9. 

[0106]As mentioned abovein this inventionall the smart cards have a common 
algorithm and a common key to the encryption algorithm (E G (-)) to an MPEG bit 
streamand a decryption algorithm (D G (-)). 

[0107]And although the encryption algorithm (E SC AI (-)) to a smart card and a 
decryption algorithm (D^ (-)) have an algorithm with all the common smart cardskey 
information changes with smart cards. That iseach smart card will contain the 
attestation key applicable to own recognition name ID. 

[0108]In performing the above operationsthe processing-ized operation including the 
process in which the attestation process and key which can recognize a partner are 
exchanged is required between a copy preventing process partand between smart 
cards and smart cards. Under the present circumstancesthe method with various 
method of using a symmetrical key algorithm [ like a DES algorithm ] whose 



attestation process ismethod of using a public key algorithm like RSAmethod of using 
FS(Fiat-Shamir) Schemeetc. is shown. 

[0109]By this inventionwhile performing the attestation process in which a public key 
algorithm was usedthe example of the method of exchanging keys was shown in 
drawing 22 but. Such a method is a basis of the premise that the key reception means 
201 and the key transmission means 202 which are going to attest a public key (ne) 
are sharingand will be applied. 

[01 10]Under the present circumstancesthe key reception means 201 is the smart 
card 1 by the side of a copy preventing process part or recordand the key 
transmission means 202 is the own smart card k. 

[01 1 1]Hereafterworking example of this invention which operates by the above flows 
is described with reference to drawing 1 2 t hru/or drawing 1 8 . 
[01 12]Since the circuit operates as shown in drawing 12 when bit stream BS like 
drawing 1 1 (a) by which scramble is not carried out is transmitted in this 
inventionAnalog video and an audio signal are outputted more for the bit stream by 
which strange recovery and RS decoding were carried out by the recovery and the 
error correcting section 1 to being decoded by the decoder 2. 
[01 13]Under the present circumstancesbit stream BS which is outputted from a 
recovery and the error correcting section 1 in recordlt is recorded on a tape by VCR5 
via the copy preventing process part 4andin playbackanalog video and an audio signal 
are outputted by inputting into the decoder 2 bit stream BS played by VCR5and 
decoding it via the copy preventing process part 4. That issince data is not outputted 
to the smart card 3 from the copy preventing process part 4viewing and listening and 
a copy are not affected. 

[01 14]And when drawing 1 1 (b) or the bit stream by which scramble was carried out 
as shown in (c) entersin drawing 13 operation like drawing 1 8 is performed by applying 
CA function. 

[01 15]Firstwhen performing a PPV functionoperate by a signal flow like drawing 13 but 
If the key stream (E G (KS)) enciphered as the bit stream (S KS (BS)) by which scramble 
was carried out is transmittedA recovery and the error correcting section 1 will 
correct the error generated during transmission via RS decodingafter restoring to the 
modulated input signal. 

[01 16]Under the present circumstancesif the decoder 2 separates a key stream (E G 
(KS)) among a recovery and the output (S KS (BS)+E G (KS)) of the error correcting 
section 1 and outputs to the smart card 3The smart card 3 decodes said enciphered 
key stream (E G (KS))and outputs the key stream KS to said decoder 2 further. By 
thisafter the decoder 2 deciphers the key stream KS of the smart card 3 and 
distinguishes a descrambling methodit will decode a bit stream (S KS (BS)) and will 
output an analog video signal and an audio signal. 

[01 17]Herethe processor 1 1 will decode the key stream (E G (KS)) enciphered with the 
decryption algorithm (E G (-))and the smart card 3 like drawing 9 will output the 



decoded key stream KS to the decoder 2. 

[01 18]On the other handwhen recording first the bit stream by which scramble was 
carried outoperate by a signal flow like drawing 14 but. After an error is corrected via 
a recovery and RS decoding by a recovery and the error correcting section 1the 
transmitted bit stream (S KS (BS)+E G (KS)) is inputted into VCR5 via the copy 
preventing process part 4and is recorded on a tape. 
[01 19]When playing the bit stream recorded in this wayand it is a PPP 
functionoperate by a signal flow like drawing 15 but If the bit stream (S KS (BS)+E G (KS)) 
reproduced by VCR5 is inputted into the copy preventing process part 4After the 
copy preventing process part 4 divides the reproduced bit stream (S KS (BS)+E G (KS)) 
into a bit stream (S KS (BS)) and a key stream (E G (KS))Said separated key stream (E G 
(KS)) is further enciphered by an encryption algorithm (E sc Ak (-))It outputs to the 
smart card 3and said separated bit stream (S KS (BS)) carries out load of the index 
code IDX to the portion from which the key stream (E G (KS)) was taken outand 
outputs it to the decoder 2. 

[0120]Under the present circumstancesthe smart card 3 which received the input of 
the index code IDX via the decoder 2The key stream (E sc Ak [EG (KS)]) as which the 
copy preventing process part 2 was enciphered is decoded with the decryption 
algorithm (D sc Ak (-)) for a smart cardThe key stream KS which is descrambling 
information is outputted to said decoder 2 (S1 17). After the decoder's 2 deciphering 
the key stream KS of the smart card 3 and distinguishing a descrambling method by 
thisBy decoding the bit stream (S KS (BS)) inputted via the copy preventing process 
part 4an analog video signal and an audio signal will be outputted. 
[0121]And when recording the data recorded by a signal flow like drawing 1 4 with 
different VCRperform a PPC function like the signal flow of drawing 16 but. When the 
bit stream (S KS (BS)+E G (KS)) reproduced by VCR5 is inputted into the copy 
preventing process part 4the copy preventing process part 4A bit stream (S KS (BS)+E G 
(KS)) is divided into a bit stream (S KS (BS)) and a key stream (E G (KS)). Thenencipher 
said separated key stream further by an encryption algorithm (E sc Ak (-))and it outputs 
to the smart card 3The index code IDX will be added to the portion from which said 
separated bit stream (S KS (BS)) and the key stream (E G( KS)) were taken outand it will 
output to the copy preventing process part 8 by the side of record. 
[0122]Under the present circumstancesafter the smart card 3 by the side of 
reproduction decodes the key stream (E sc Ak [E G (KS)]) enciphered in the copy 
preventing process part 4 with a decryption algorithm (D SC AI (-)) to key information 
aluminum stored in RAMThe decoded key stream (D SC AI [E G (KS)]) will be outputted to 
the smart card 7 by the side of record. By thisif the smart card 7 by the side of 
record outputs to the copy preventing process part 8 by the side of record in 
response to the input of the key stream (D^ [E G (KS)]) of the smart card 3 by the 
side of reproductionAfter said copy preventing process part's 8 enciphering said key 
stream (D SC AI [E G (KS)]) and restoring to the enciphered original key stream (E G 



(KS))By mixing to the bit stream (G KS (BS)) outputted from the copy preventing 
process part 4 by the side of playbackand outputting to VCR5 by the index code IDXit 
will record on other tapes. 

[0123]The data of the tape recorded in such operation can apply a PPP functionand 
can play it by a signal flow like drawing 15 . When recording the data recorded by a 
signal flow like drawing 14 with other VCRa Back-upCopy function can be performed 
like the signal flow of drawing 1 7 . 

[0124]That isif the bit stream (S KS (BS)+E G (KS)) reproduced by VCR5 is inputted into 
the copy preventing process part 4After dividing the copy preventing process part 4 
into a bit stream (S KS (BS)) and a key stream (E G (KS))Encipher said separated key 
stream further by an encryption algorithm (E^ (-))and it outputs to the smart card 
3Said separated bit stream (S KS (BS)) will add the index code IDX to the portion from 
which the key stream (E G (KS)) was taken outand will output it to the copy preventing 
process part 8 by the side of record. 

[0125]Under the present circumstancesafter the smart card 3 by the side of 
reproduction decrypts twice the key stream (E sc Ak [E G (KS)]) enciphered in the copy 
preventing process part 4 with a decryption algorithm (D sc Ak (-)) to the key Ak of the 
self stored in ROMIt decodes with a decryption algorithm (D SC AI (-)) to key information 
aluminum furthermore stored in RAMThe decoded key stream (D SC A , {D sc Ak [E G (KS)]}) 
will be outputted to the smart card 7 by the side of record. By thisif the key stream 
(D SC AI {D sc Ak [E G (KS)]}) of the smart card 3 by the side of reproduction is outputted to 
the copy preventing process part 8 by the side of record via the smart card 7 by the 
side of recordBy enciphering to key information aluminumthe copy preventing process 
part 8 restores said key stream (D SC AI {D sc Ak [E G (KS)]}) to the original cryptographic 
key stream (D sc Ak [E G (KS)]). And the restored cryptographic key stream (D sc Ak [E G 
(KS)])By the index code IDXit will mix to the bit stream (G KS (BS)) outputted from the 
copy preventing process part 4 by the side of playbackwill output to VCR9and will 
record on other tapes. 

[0126]Herea fee is calculated by the improved smart card 3 or 7. 
[01 27]Although the data recorded by performing such a Back-up Copy function is 
renewable only with VCR which recorded the former tapewhen it is normal playbackit 
operates by a signal flow like drawing 1 8 (a). 

[0128]That isif the bit stream (S KS (BS)+D sc Ak [E G (KS)]) reproduced by VCR5 is 
inputted into the copy preventing process part 4The copy preventing process part 4 
is divided into a bit stream (S KS (BS)) and a key stream (D^ [E G (KS)]). Thensaid 
separated key stream (D sc Ak [E G (KS)]) is enciphered twice by an encryption algorithm 
(E sc Ak (-))It outputs to the smart card 3and said separated bit stream (S KS (BS)) adds 
the index code IDX to the portion from which the key stream (D sc Ak [E G (KS)]) was 
taken outand outputs it to it to the decoder 2. 

[0129]In this case. Via the decoder 2. The smart code 3 which received the input of 
the index code IDX decodes the key stream (E sc Ak [E G (KS)]) enciphered in the copy 



preventing process part 2 with the decryption algorithm (D sc Ak (-)) for a smart 
cardThe key stream KS which is descrambling information is outputted to said 
decoder 2. After the decoder's 2 deciphering the key stream KS of the smart card 3 
and distinguishing a descrambling method by thisBy decoding the bit stream (S KS (BS)) 
inputted via the copy preventing process part 4an analog video signal and an audio 
signal will be outputted. 

[0130]And in the abnormal playback played with other VCR which is not VCR 
recorded at firstit will operate by a signal flow like drawing 18 (b)and playback of a 
tape becomes impossible. 

[0131]That isif a copy tape is played by VCR9 which performed the tape copysplitting 
processing of the data (S KS (BS)+D sc Ak [E G (KS)]) played in the copy preventing 
process part 8 will be carried outA bit stream (S KS (BS)+IDX) is separated. 
[0132]Under the present circumstancesafter the separated key stream (D sc Ak [E G 
(KS)]) was enciphered to own key information aluminumFurthermoreit is enciphered to 
key information aluminum (E SC AI {E SC AI (D sc Ak [E G (KS)])})and is transmitted to the smart 
card 7. And since the smart card 7 cannot decode a bit stream (E SC AI {E SC AI (D sc Ak [E G 
(KS)])})the key information KS is not transmitted to the decoder 6. Therebysince the 
smart card 7 does not descramble a bit stream (S KS (BS))playback of a copy tape is 
not performed. 

[0133]On the other handit is as follows when the term used for this invention for the 
understanding of this invention is defined. 

[0134]1) GA bit stream 2KS=[which is not carried out as for BS:scramble — 
K 0 K,K 2 and ... K, and ... a K n ]:key stream — heretotal 3BS=[of the key by which n was 
used for scrambling — BS 0 BS 1 BS 2 ...BS i and ... a BS n ]:bit stream — hereLlnit 4S KS (BS) 
which carries out the scramble of the BS, as one segment of BS : MPEG bit stream 
S KS (BS) =[SK 0 by which scramble was carried out (BS 0 )SK, (BS^.-SK, (BS,)and ... 
algorithm E G (KS) used for enciphering and decrypting a key by 
SK n (BS n )]5E&D(and) :GA — =[E G (K 0 ) and E G (K,). ...E G (K i )...E G (K n )]D G (KS) = [D G (K 0 )D G 
(K,)...D G (Ki)...D G (K n )] — =KS6IDX:[01 and 2...L ... n]:index stream 7Ak: — attestation 
key 8E sc A (-)[&D sc A]H:ofasmi 



— encryption and the decryption algorithm of the smart ce 



key (A) of the sr 



[Effect of the Invention]Since this invention performs attestation and a key exchange process automatically at the time of power-on or connection 
between digital VCR as explained aboveSince illegal viewing and listening to an illegal smart card and a copy preventing function can be performed 
automatically and illegal viewing and listening and prevention from a copy can be performed still more nearly selectivelylf scrambling processing is 
performed into the portion which wishes protection of a programa fee can also be imposed as a requestperforming illegal viewing and listening and 
prevention from a copy automatically. 

[0136]And since this invention transmits a bit stream and the key stream made to separate in a differing courseWhen the quantity of protected 
data can be decreasedand illegal viewing and listening and a copy preventing function can be performed efficiently and the prevention from illegal 
viewing and listening and an illegal copy preventing function are embodied to a smart cardA fee can be discriminatorily imposed to each function by 
distinguishing PPVPPPPPCand a Back-up Copy function. 



[01 37]This invention is applicable to the copyright-to-program protection in DSM like digital VCR by embodying the copy preventing function of the 
digital signal which can be applied to DSM application. Thereforeapplication of this invention will acquire the effect that the reliability over illegal 
viewing and listening and the prevention from a copy can be raised. 



DESCRIPTION OF DRAWINGS 

[Brief Description of the Drawings] 

[Drawing l] lt is a block diagram of a general scrambler. 

[Drawing 2] It is a block diagram of a general descrambler. 

[Drawing 3] It is an illustration figure of a transmission format. 

[Drawing 4] It is a detailed illustration figure of the PES header in drawing 3 . 

[Drawing 5] It is an illustration figure of the transmission format by key distribution. 

[Drawing 7] They are illegal viewing and listening of this inventionand a block diagram of a copy arrester. 
[Drawing 8] It is a detailed block diagram of the copy preventing process part in drawing 7 . 
[Drawing 9] lt is a detailed block diagram of the smart card in drawing 7 . 

[Drawing 10] It is an illustration figure showing the splitting (splitting) of the bit stream in drawing 8 . 
[Drawing 11](a) - (f) is an illustration figure showing the format of each bit stream. 
[Drawing 1 2] It is an illustration figure showing the connected state of this invention. 
[Drawing 1 3] It is an illustration figure showing the connected state of this invention. 

[Drawing 15] it is an illustration figure showing the connected state of this invention. 
[Drawing 16] It is an illustration figure showing the connected state of this invention. 
[Drawing 1 7]l t is an illustration figure showing the connected state of this invention. 
[Drawing 18] It is an illustration figure showing the connected state of this invention. 
[Drawing 19] lt is a signal flow graph for operation of this invention. 
[Drawing 20]It is a signal flow graph for operation of this invention. 
[Drawing 21] It is a signal flow graph for operation of this invention. 

[Drawing 22] It is a signal flow graph for the key exchange by this inventionand an attestation process. 
[Description of Notations] 

I and 104 A recovery and error correcting section 
26 ATV decoder 

4 and 8 Copy preventing process part 

II and 16 Processor 
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h y - A*-r > t •> * x a - k Kfctos-r mmz m a l 

fflSt. 

f !©+-1t«fc>tt LTBg^b LfcSks HWfbStifc*- 
LTfc:'>y h 'J-A<0J:3KIMaWt:t!:E» , r«»2 
->XxA(7)*;£*!H&tmiTO±£»o 

[H*^ 1 3 ] mam 1 eiMSPgt*, i#o*-m« 
a k LTit^b* i* y -A=&a 

iK«LTfliwbL^ mmtzctzw&ttzm 
*m 1 2 ibkotV ~s*)m®~;XTU<D*mmjkzf 

4] nE]R2€S£eti«tt. a#©*-it$s 

A k^LT^b?tl/c*-7. h 'J-A^ 

-nraiAkic»LT2iHia*fku ?6tcfB^iJ©+- 
iwia i tc»LTa«{bLfeaeafr*ct*it«fr 
^II3<31 1 2 bkot-c ^*;HBMS5/Xt A©^asw 

ms^ 1 5 ] i3fi«ftos^Btic*-x h y - A (E 

G(KS))!W*fflSft*£ TPPCJ EmmtffllLTs 

xhy-A*TX^5>7;bT5 rppcj t-FIi 

tc*-X h y-A(DSC AK [EG(KS)])tf«ffl*ft*d: % 

IBaflJ©*-1f $Blc*t LT 2 ISBf^b LfctL 

-If LT*-'|f S«¥ ijR U VMZ *l7c*-1f 

ii-rvfy^W- K^ffl^T e w h y -A*t 
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mmk 1 6 ] t-)-u ?im\m*wMm ltrst 

m l/c», km * *i/c*-x h y -A^nt^r a^ 

tut mmikxim y rriE^igs l < « 
stti^?nse>> Kxhy-A^xx^vx'yv^if 

a KS^T x x ? 5 > XVbf 5 x 3 - t s 

HuiB«¥i5S±sas#ST-Bf^b*tifc*-x h u - A£ 

a^LT, M!3x=l-^3MS'\xX*5>7y >?if$B 

t LTatfrtaxv- i-^mtftzmmLfcztzftm 

mm. 

mmm 1 i ] mmmmm. y uje wmtarti 

fcra-#^«**^-t*#«fca«LT, MfBXV- 
1-27- K7MlBx=]-2"#g;<D*-X h y-A*S#© 
*-1WB?a*LT, xX?7>?y >^lf?B£M!Bx 

fr3J:3fc^LfcE£*»*£*-*III»il 6fB«CD 

xV s>#;w»r/xf A<oTaaH«atfai:i«±i6flL 
msb 1 8 ] KttBttHKtm y piE^atfSttarft 
fc«¥B6ih«Bi#«*, xV s;*;na»/«s««t=« 

«LT«Da6TaH*fT5Ci*«Fai-r«»CT|1 6IB 

So 

1 9 ] mibxV 5;*;na«/sss«<j««i 
*ti/j:ffl¥K±#igo*-x h y-A^-rv*, xv- 

h*-RcfflBrr*££*fc» £y hX HJ-A5Y > 
*7*n-$r#8(c»au MfB^¥lfc±ffi3#K<!:x=i 
-y#S*»«LTs MiBXV-hA-KtffyfBxii- 

g#f£<D*-X h y-i**i#<0*-1WBTa*LTtt 

ibx =1 - ^#«^aj*r a c 1 1 c * y ^aB**i»±-r 

am 2 0 ] SufB^¥ffi±SQS#ISli rppcjt 
- K®Ea»*»a:l5lETV s J*)\4BSk/B&Sm.<DK 
£x-$#S5MiLfc+-* h y-A*i*<0*Ht* 
7-ng^fbLTXv- hA- P\eas*-*c 

9E«©xV5>*/UB^S>*xAflMFSlBB 

[««5!2 1] MIBffl¥|!S±5fta#®(i. 17^7' 
□ : E— K<DS£«{*S£liSfcTV5?*JUE 
«^S£8«©li£x-*frS»*Lfc+-X h y-A 



xv- h *- KH*©*-«a*Etrr * r a m 
ns^b/^dry Xk*&m?z7iis3'j xabr* t y 

SiiBR a M©+-ittB?t3iE7/nry xaiw** y© 

^f#Si<!:-raii*«1 6, 18, 9©^-r 
n*HClBtt1-axV-> ! ^;b^®->XxASU : }t¥K±S 

m. 

mmm2 3] mibxv- h*- 
e-y hx h y ^©jftflDa^b^i/dry xaxp^as- 

&»(»mmt7H'3'jxu7n<f7i>%:ftmt%m27 7 

i<0X7- h*- K©+-flHB*-«IB«-r« RAMi 
R&H 1 9 0t>-rtlAHCfB|g(DxV v^;UB*ffc->Xx A 

[»*3S2 4] m 1 xV s;*;nBt«/sse«<oBft 

x-$£tf'J/ hX h <)-L>t*-X h 'J-AKSHiL/fc 

& #s*ftfc*-x h y -A*HHSffrr i 

MESS 1 ^¥RS±5QS#STBg^b?*l/c*-X h 'J- 

r**K M2XV-hA-K^ 

S5tBm2XV- h*- K*^LTeaS**ifcWIBJS 1 X 

v- h*- ko*-x k y-A*i#0+-flwn»B» 
f k Lft^ Bt^fb? n/c+-x k y - A*»«*hfc e 
•y hx hv-httuz, n2T<f*j*j\,tm/n£m 

xx i±<o*?kwmu : ®.wM±mWo 
amm 2 5 ] mm 1 m^m±mm^®tt. *-x 

mi xv- h*- p\e26T«c£s»a£T*w»s 

2 4fB|g©x-f- ^5»;UB»->XTA©3FSaiWC6tf«¥ 

m&m2 6) MIBmiXV-h*-R*, rpp 
C j =E- K?S*B3v » 1 ^¥K±5aS^S©*-X h 

y-A*i#©*-if«iiiBgfj©*-ifffiic»LTa 
«fbLfe«, «2x^-h*-K'\e2ir«ct«if« 

<hf SW5(<]I2 4iB«<DxV i/^JHSSv-XTAC^i 
[ffifiS 2 7 ] Ml BSff 2 tt5R6±«a#SH*» M 2 X 

v- h*- KTe^?*i5*-x h y-A*ajio*- 

ffi«A I tcWLTBf^bLfd^ BlWHeitMOHR 

otf-y hxhy-Aia^-r*ct*i«Ktr«ii«5i 

2 4IBK©xV 5?*yH8H»5/XxAO^aaBaWt¥ 
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mmm2 8] mmm 1 xv- h*- m rj^tr 

SO+-X hy-A*a*©*Htfflfc»LT2|sffl» 

£f*IIH8il2 4El©T-f ^UBWiS'XxA©*;* 

[fERE 2 9 ] MsBSg 2 Ig^BSlLfliS* g(i. m 2 X 
V- t-TJ- Kfr6eSi*tl«*-7, h U -A£g#©+ 
-tifSBKttLTB^HbU *©B»fb**ifc*-X H y 

5RJI2 4K«©rV 5>*;M!^5/XTA©*3S«B»tf 

[ff$8 3 0 ] gylBM 1,12 WglftjhXUMMi , 
7.7- V13- KH*0+-1ta*»Kr * RAMt, 

MI3RAM©*HlHIHeJ:oT» MfBT 7 ;^ y XAftfB 

[!!*«[ 3 1 ] MfBH 1 > m 2 XT- h *- Kit tr 
-V hX h y-A©fc46©tt^b7*;l/=ry XA7*n?5i* 
SHPK-TS* 1 7/l/Uy X£J!S«/ 1 'J i#©«^ 

»«**y&, 

fi©X7- h*-HHB«-Wllf«r* R AMtfrSUWJ 
LfcCt^lWRtf *»«W2 4fB«©xV v^;W<f! 
i/XxAO^^lKSO-^^g^o 

[000 1] 

h7J- K**ALTtf«i*ftfc*-X h 'J-A*a»L 
Tt7^7>7 U >7£iS*»J&r * «fc 

[0002] 

[eajoaafi hbm&tV5>*/m*«5/xx£-p*s£ 

*lKK±©/c4&U:Conditional Access (J-XT> CAi^ 
5) ->Xx^©ft3tlcM«5A^*LTt^„ 
[0 0 0 3] EOJcSfcCAS/XxAtt, T-7VUTV 

*>«E»atfc ^(OWR^ + >*/u?oaHi*tx^ 5 > 
7;b*hfe«ttT»jai-r * c t k * y » iKC?£*fco 

fc^*£tttfyX*5V7y>^rtLTafcflffi7' 

fcf . ^MJftiMgflltg L < tt*II© A T V*j?&©GrandA 
llinace (ttTs GAil^) ->77/»li, CA«£S 



rsfciMHMMrifoTasy. G l*±©tfx*B§^(Vid 
eo C i pher) ©£ ? &ftr£ttS£KttB * X* 5 > 7" <J 

[0 0 0 4] -flSMSCAS/Xx^CO/ctoOX^^V^ 
yv^XxAtt G laotx^BWCVideo Cipher) 
•>XTA7'$y, Gi lhousen©U. S. Pat. No. 4613901#^F 
ZMffitU Ctltt£&TVS>Xxi>T*IE&flDA#©T 
X?5V7'5^fi&T^rl3TVfl^£X?5>7VULT 
jRjMf 3 <h , iEftjfl A#© 7X^7>77 TW? W K x 

x*7V7;i/rs->xxZxsa ! sa?s*. 

[0 0 0 5] -?-LT\ xX75>7'y>?£ff5tfx:t 
(Video Cipher)->XxAlCXV- h7J- K**AL 
TMULfct©^. S. Pat. No. 5111504T*£y , CfUiGi 
lhousen©v'X5 1 A*xX'?5>^5teMar^ rflM 
7n-k'y*t—( Information Processor)j t rx?- h 
3-K(smart card)j ©<fcdlc^§RT^S r§HU^ 
Vh (Security Element)j lc2»»ILT*^L/c i £>©T' 

[0 0 0 6] MlB£iC£iIfflLTX?5>7'y 

y >^->XxAt*H 2 ©J: 5 teas***. 
[0 0 0 7] TO7-fi?$;l/5«|->X7A07 
%8H&lhgWi* -flSSttefffg (Common Category Ke 
y)CKJ2iZfmmib'«7 h /(/(Initialization Vector) P 
KW&liTTVff^V i £X?5>7VI/LT> X?5V 
7/b£ftfcTVfi^SVo£X?5>7~y>?1f$B(E 
U(D)EU(S)(CKk EcK(PK))*W*-r5X^5V77l 0 
1<t> T X ? 5 >7' 'J > -?Wc4&©1f $8 (A (D) , A(S))« 
xX 5 > 7 'J > (U (S) ) leStf LTBa-^ib (Encrypt 
ion)T^XT-r-7J-F1 0 3 «h, C©X?-h*-K 
1 0 3©tX^7V7'J V^©fc»©flMB(EA(D)[EA(s) 
(■«])««* (Decrypt ion) LTMSBX^5V^5 1 0 1 

©€2lTVffl^svo*xx-?7>7';u-r^c<hic«fcy 

7E©TVffl*DVofc«7DT*fll«:7n-bv-tf 1 0 2i: 
6^6*JS^^o A(D)tt1fa7n-fey+J-1 0 

2 ©BSE*- (Authentication Key)?*y» A(S)tiX^ 

- h *- k 1 o 3 ©HE*-?* y % u (d) itmBmmy 

02<D=L-y h*-(Unit Key)T*y» U(S) 
(*tu§BX^-h7J-Fl 0 3 ©any h*-T*S5= 
[0 0 0 8] d©ISs tulBX-?5>7'5 1 0 1 l*-j&* 

- c k *xx?5 >xy >y©fc»©iiia (u (d) u (s) ) 

WLTBf^fb-r^Ml Bf^b§§1 1 1 «t, ™<b^7 h 
;U P K ^-SS+- C K Kft LTBH^kf 2 Bg^fbfg 
1 1 2t. ««IMb^h;UPK*BrtB«2W»fb«1 1 
2©tU*jEcK(Pl0lE»LTIi»»fk-r*«3llWjk»1 1 

3<h. Tvf§v i *mim3i%mtm-\ 1 3©aj7jwK 

tC5Si:TX77>7Vb-r^X^5>7'yv^T4Sl 1 
4ii^5^filt*tl«„ 

[0 0 0 9] J-XT, COJcdK«fie*ftft8E3teK«©tt 
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[0 0 10] £*\ eS->XxA^TVfB^G)MLJ: 
5t«JH, X-75>75 1 0 1 »«1 mbsi 1 
1 T— BflBSflWI (Common Category Key) C KfcxX? 
5 V7 'J >7<Dfc4frCDlf fB (U (D) ) , (U (S) ) tea LTBi^ 
{bU »2BHKkl 1 2 ^IMb^y" h/l/1f$B (Initial 
ization Vector) P K*HB8H*1t«C Kfc»LTfl» 

<bu M3Bi^k^i 1 3?ajjiB<b^h;mHaPK* 

BUlBSil2P^bS§1 1 2flDffl»(EcK(PK))lcS*LT«» 
jbLTX-?5V7U>^S!lSiSl 14^*^)1-^0 £© 
ft W5>7'J>^SB«1 1 4&Sg3llg^3§1 1 3 
©tH^WK^S^iLTTVfi^V i *x*5>7/i/r 
So X?7>7y>71f$&WKliEECK(PK)(PK) 

[0011] chE*y, x^7V^7 1 o 1 it-tm 
mmc Ktca-rsBi^fbit$g(Eu(D)Eu(s) m\ wm 

0 2'\eas-r*ciKft*. 

[00 1 2] 7?5V7/l/*ftf;:TV^SVo 
*7*X*7>7;l/-f*»^ X7-h*-K1 031*11 
I7Ptyt102 OBEEflHi (A (D) ) t g#<D18!E1t$fi 

(a (s) ) ic*f lt 9 x <? =z> y 7 y > 7fc&g&it g w k * 

« (EA (D) [EA (S) (WK) ] ) £flHB7n-fe y "9-10 2 ^mfc* 

[0013] ctiK*y, flffl^p-tyy-i 0 2tix^ 
- h*- k 1 o 3*saj***ifeB»<b*hr=flHB(E 

A(D) CEa(S) 0»K)])*a*U Ztl*mVTZ9>777 

1 0 1 *»6e3l*nfcT Vfll^S VofcxX^SVTVU 

&So 

[00 14] Il«7nt'y1tl02t7?-h 
7J- K1 0 3 F^©1fffi€iiltC^b (Encrypt ion) 

©tOT'SSc 
[0 0 15] fljjttf, GA(Grand Al I iance)iSiSMT V 
5'X5 l i*©fiil(spec.)ttCAS/XrA*3aiU Mo 
ffiSrnha;Hc4!«HilB3S«Jlil4tiT^*. 

>7'J >$TOSRtf*-B»fb(Key Encryption)*** 
SST * <t l> a SttfcfcCTs 7 U*-> 77KF I ex i b I e) 
^fflT-^y. fiotfy r-Xr-'J-^jiJRMlc 

WfiTC A«ttt«VB U#SI4iItt(Flexibi I ity)tf« 

cct% 7?5v7yv7tt, mm^—snt 

SOl^T, 5*-* fcfy h7 h U - AS^SWJ (Random) 
1"S C £ U BHMb (Enc rypt i on) "T S*5£ffiffl# 



ftl^ «fc o T VSSSfl«ttRr* ftfcttffl««fl!) 

[0 0 16] Mf3»)ft©fc&#MPEG©e>i7P hP 
^30«fc5S7*-Vy hT-*Hf SCitf?- 

5, c©<fc5se5Si7Php;uicA«i*g*sa-rs2 

[0 0 1 7] IK 2 tfy h©Transport-scrambl ing-c 
ontrol7-r;l/ KB, fraMX r- y--k#X*5V7/l/**l 
kfrZofrt, 7. * 5 V 7/1/* ftfciifcfc £ A,£7? 5 
>7'J >^*-flHS«* hfc<T*fll6-&T < ftSo 

[0018] 12, ffiiXHy-A©a(S (Adaptation) 
/\«/ 7F»3£>Transport-pr i vate-date7 -T /I/ K *ffll/*Tflil 

*©7 f -**GA^s>x7 i Aflum?-*«fi&?» c 
©J:9fc7</UKfcttBt^b*ftfcx*5>7y >7flT 

[0 0 19] HuE^tt*Wr«H30J:5aMPEGfl!) 
e&7PhP/Hi, €SM'sy7, PES (Packet i zed El 
ementary Stream) 'Sy 7, ZLT^ZMZt-T^tJk 

tfe5 s *x-***ti?tieL<tt^iceas-r*ij 5 » 

£5i£'\y7«y>7'\y7(Link Header), j®5/vy 
7, Slf^U'TP- K(playload)fSia^S*W6*tl«. 

[002 0] Zi^, 'JV-fsy^ (Link header) 1* 4 
/WKOfiS, Sfi^ytfttRl*ttas**rr*. 

[0 02 1] KtlByV^y^Ctt* Transport-scramb 
I ing-control7^/l/ KzWf A**U £©7-</U KQflli 

TOO j T'SfUf Not-Scrambled, M Oj T'SfitfEve 
n*-, ri ij T*aBtlif, Odd*— , roij I-Sft 
Reserved<!:igp|1-SCi:lcSSo 

[0 0 2 2] ^LT, »S^vy(£tt75^tfy h^Tr 
ansport-private-data7'T/l/ Kz^^Stl, l5fS757tf 
y h^t^t* 1 tfy f- ©Transporter ivate-data7 5 7* 
teS, E13©J;-5&MPEG©e^7Pr-P/UcDP 
E S ^ y ^ttH 4 3 K«J&* tlSo 

[0023] C<DPE S'Sy ^taix-f C R0 

cfc3^xV->^;HB1fjiftD S M£DfcA6©7-r/b Ktf# 
SfS*\ C©«fc5&7-f/l/Ri1 4bfy h<0«*** 

-rsp e s<\v?7^?m®i:zj%m*zGT% pes 

^y #71-/1/ K*SA/e*J**hS. 

[0 0 2 4] MIBP E S^\y #77f 1 tfy h 

(DC R (Copy right) 7 5 7, 1 tfy h©0 C (original-o 
r-copy)757, 2 tfy h<DP D757, 1 kfy h<DT 
M757, *LTHfy hOAC777*dA/-p«ffiT 

So 

[0025] ^-LT, PES^y4f7-f/l/KttR»«a 
IJ^tU P E S^y7777ffiaiC^tlfcP D, 
TM, AC757»C«fcoTHB««fl«KS*i|l*. IP 
"Bs PES^y7777TPTS/DTS^ti, PD 
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75?©«# TOO J Tr&tlim&i*?. ri Oj T£ 

*i«4 o try k r 1 1 j -pftnaf 8 o e-y h t&y , 

DSM Trick Mode7^/l/ R*TM75-?©<iI# rrjj 
?S*iK?Si-e*\ r 1 j TJMi«8 fc?>y htS'J, Ad 
ditional Copy Info. 7f ;U Ktt A C75?jS« Mj £ 
-fe'y 8lf7 htSon^tTS^ 

[0026] <:<D«fc5S7*- , 7y h^jiffl-rscttc 

«fcy» 775>7U>^1f|g'&e3MU C©flM*ffl^ 
[0 0 2 7] xX77>7'J>^->XxAtt, 

fx ? => y 7 y y <nz®M*i\T *- <t £ t, 

fcs &©Bg^{k* ftfet-m* ftTt****?* o 
Ts T f X7^>7^« T0dd*-j t rEven*-j 
7Vo*»jgLT^fctt*ltffc6ai\ ^LT, 775> 
7U V^Xfiltv 31£©fi£7 h U x775 
>7>*n**St«: <fc o7, 'J >7A>y ^Otranspor 
t-scrambling-control7-r;UKOffl«-b'y h LTfiJML 

[0 0 2 8] Ettfcfcy, T775>75tt§ftx-^ 
TlI^£ftfdE&^\y ^©Transport-scrambl ing-contr 
ol7-<;l/KOfl«c«fcoT TEven or Oddj *-*W»JL 

[0 0 2 9] Hl-Bs H50J:a47t-7yh©T-* 
#fi££tlTs 77- h7J- KT»a^*tlfcTransport- 
scranmbl ing-control7-f ;l/ K©ffit::J:oTs 
>75A^K2n-lSa©7U-A^0dd+-7xX75> 
7>LTl^*4:SN 7s?- h7J- R*^CtX75>7 
K2nS@<D7 U-^TTransport-scrambl ing-con 
trol7-c;U K*«*U E©J:3&lwrow&fT:bft 

[0 0 3 0] -73s CA«gB*ff3ATVT3-#*« 
6 © <fc 5 KJiST* CfcWiff, C©<£-p&A 
TVfa-^1 1 0tieiMT?;l/5 1 7U7-*t1 0 5KH 
^WfcEW&yX^VT^fcfcBLTD E S7;l/dT 
U XA^» P N VXfcffl^fc* h >J -AIMVt- (S 
tream Cipher) 7WJ XA^Tx775 V7U 
fr3Ci:lE*y» CflDATVra— 5T1 1 0?B»fb* 
tilt*- (Encrypted Key)tt7?- h7J- K1 0 3?« 
^k(Decryption)£*l3<, 

[00 3 1] CCr, 7s?-r-7J-F1 03tATVf 
3-^1 1 0©^>*7x-XttlSO-7816**SHMW;: 

[0 0 3 2] IP'S, H6©S»«llfa-t7gf*ft 

fefli*fl«aiiat«sypiEa5i o 4T°mmi>titc&* e 
asiSfcR£*nfcK y # r s >^^> ltu 

JEtftU ATVt3-$M 1 0©ga&T^Jl/*7 , U'$? 

[0 0 3 3] CO)B,7^P3>hP-7l09l4f 
X?7V7^*ft/aW^*atfT-**3WLT, X 



?-h7J-Fl 0 3tCx775>7y> $f©fctt(DIW 
fcflHHSea&U tufBXV-r-TJ-Kl 0 3ttfi3i*n 

3„ C©K! % £2£-7?/l/x7U7+7l 0 5 3^x7-7 5 > 
7'J >7'|f *te»^LNTE«eT*fll*» £EI8*- tV 

cntcjcy, tfxTf-x:]— jm 0 7«Effi*- x-rtffi 

*HWLT/*»J 1 0 6(C-B»«LWI» *©BfjI 

0 81*. E-ffit-TsftimzimLTt-T^itzn 
Ms ?^P3>hn-7i 0 9(*eai^;u 

«LT. MfBt:'x*x=l-^1 0 7arM- tV* x 

□~ sn 0 8<Da^»»r«o 

[0 0 3 4] -73s BW<btC«ffl*h*^5A,a*iafl!) 
*?\ DES©J:5S7P-y7-+r^/\-(Block-ciphe 
r)7;l/dfy XA&tf P N->-7-V7^ffl^fc7 h 
•y'-l'A- (Stream-c ipher) 7/U:Jy X^flHttWK-» 
j£<ffifflSftTl/»*„ LfrU C©<fc5&7D"iWiSi^:f- 

ey Management) Stf^-TifiB (Key Distribution)*^!^ 
l\ 

[0 0 3 5] I^L C*Hc*fr*»Sa8t LTs U.S. 
Pat. No. 4200770© J: -p S/\°7y -y7*-(Publ ic-Key)B§ 

«+- (Secret key)?a**ffdt»©?**. f-LTs 
Sl©«fc^*/<7y y ^*-B»{b*3*aSLTiiS^k 
i/Xx/^T-milL/c©*^. S. Pat. No. 4405829T** V , R 
S AB§#fk7;HryXAi:LTJEQ6tlTt^= 
[0036] 

[^* >i P;*Lcfcd<i:t"SiiM] LfrU MIB/\°7y>y 
^*-ai-§-fk73iCt*s «aBg^fkteti?Fii7:'$^<i:t>d 
«Bf#»*. Sis CAS/Xxi*tt^jS»B*l»±-r*C 

[0037] DSMCcfc^SlBSJSWcJsOTffi 

*e*ti«7"p^AK»-r««m*» ^aa¥©i»±?& 

fc«¥B5jt(Copy Protect! on) 75^l*s 7=V-7^;U75^ 

[0038] tsoTs ^*H»s*»a-r 

Sfc46©t©T\ ^-©iWtis 7^5>7VUfnfct; , -y 

h7 h y-A£:7x75>7y v^icffiffl*tifeB»{b* 
*-^x?-h»-KT*a^Lfc^s zommm-zt^ 

Ts tf-y hXhy-A^r7'?7>7VU-r««fc-5lcU 



(8) 



ftH¥8-242438 



[0 0 3 9] E©«fc 3 C AS/XxATX? 
- h*- K£*ALTt»ttfc8£**xv*(checkin 
g) - TS«!l&*£A/PPPV(Pay Per View)«|g«-JI3 

r 5liT\ 5/*TA©ttlB*ffll|Uc7y K(U 
pgrade)**«Ct#"P#S Q 
[0 0 4 0] Nd s *3tHBtt, fioKT— *«HW*fl!> 
t\ «»-r « x - $ ®*-#***IS3fc!>t * C <h tf T 
/<7-*V«t. L< HJM©fei6fl)T-f S?*;bV C 
R KWmffiK* i««t«:BB»tf+-3a«18*fia 

[0041] 

5 7-9 ft* Vzryyfr (scramb I e) Sftfcjb^ 3 
m&mtmt. MEWHISfflrcx* 3 hfc 

£fcfy hX r- 'J-A<!:*-X r- 'J -AU^ii Lfd& » 
gff*ttf;:*-X h U-A*a*LT+-1WI*fflKU 
*-1taK(5i:Ti(E«lt**ircey hX h 'J-A£x 
X-73>X'/Kdescramble) LTn T-f7^^giK7 
^X7U^iT£B£f£Pii<!:, M13¥USiJ8Pir£X?3>:? 
;l*ftfcr-* i:«HI*ft* fBftt L < ttm*- 

kkis i:t try h x h y - a t *-x h y - a# as* 

*lfcX? 3 >^b**ifcx-*««?IBajlW«cEa l 
fey, 7^5>^Jhft7-! ?£bfy HXh'J-A,!: 

*-x h y - aie^ki u ««*nfc*-x h y -a* 
fl»fbLfc«» tfy hX h i J-L,tmfzLTtmmmz 
mktzimmit. ta^jHiaPB?** 3 yy^n 
Tc t- $ t mm* *i% t , x v 3 y 7i\,hmzt- $ * 

fcfy hX h y-A<h*-X h 'J-AU:»liLfc*» rp 
PCj €-KfcL<tt ry ty* 7. y □ (Back-up 
Copy)j =E- KlEjSlTTSraSftfc*-* MJ-A*IB 

««©*-i«BtE» LT«*<b LTeas Lfc y , 
ntc*-z h y-A*ii#<o*-flHaii3«fli©*-ni 
«K»LT2Eia^bLTe3i-rseai«i«i:*i»6a 
y> suiBB^ispg. Etum £3f£m& ^Bxttis 
umizfi? ci#f*Tfey, <tiEj: y ±i3sw 

[0042] $3stB&r?i& aiBW»ja«?x*5- 

[0 0 4 3] £3$]jffl&ffi?& i9EB£SlK(*s »iS 
*ftfc*-* MJ -A*MPEG£y hXr-y-Aldtt 

iT£>a^{b7'/bd , yxA?a^bLT, *-l«s*SIW 



-T ««3feWBrci& MfBIBftlSPg©^!^ 

£Sg 1 8P£ <5^ m 1 BWPBWf k**ifc+-^ h y —A 
& rppcj t-KW6t\ sEtM* r/^^7»r- 
at-J t-K?*Sfr*«»J-f*SI2ai«£ % MfBH 
2SPiT- rppcj *-Ki«ffl**l*^ fBUfJ©* 

-itaiE»LTa^k**iTfias**ife*-x k y -a 

£i3flfflij©*-1f SSKStf LTWHWb -T >r y -7 
X3- Klc»(B-r*(fflH«:J»ALTty hX h y-A© 
J:3lcfB^-r5M3SPi<i:, ijf3M2S|ifC : - *i\vVT 

-t. r- y -/x^iBasi ]©*-it mm Lx^mt u * 

3- KtE»iB-r*ffim=«iALTlfy hX h y-A©J: 
3lcfB^-r5M4lS|!g<!:. fr6§oTl^. 
[0 0 4 4] «%Xfie^ffi?tt. HUf3m3S|!i© rpp 
Cj t-Fttm^ hXW-L.t^-ZhV-k 

-r>ry -7X3- K*#ALTeai-r** i esisn 
<t, Mism i esiaM'WM«**irc+-x h y 

HuiBm 1 esiBwreashfeify hx h y -aie 

mZ'fiSt, B4*tlfebfy hXhy-A(SKS(BS)+E 
G (KS) ) * tT y h X h y - A (Sks (BS) ) t *-X h y - A 
(Efi(KS))K»«Lfett % *-X h y-A(EG(KS))A^gf 
*tlftgP»tC^>x-y^X=l- K I DX^#Af S»IH 
©Pg,!:, MiB»if|gpgT ; ^gS*^fc*-Xhy-A(E 

G(Ks))*i*©*-infflK»LTK»<b-r*B»{k8mif 
t, fflEflH^biWPn»fb**i/-c*-xhy-A*i 

*©*-HHBtMPEGey hXhy-Alc»LT«^ 

ftr * c t k «fc y *-ita*WBs-r t » tuts 

WBgSBT*«g!*nfc*-1fi»::S^TBul3^ll*ti 
fcfci'y r-X h y-A(S K s(BS))^7 : X^3>7;b-r-5a 

[0 0 4 5] S5»T'tt, tufam4©|ig© r/^ y 
•77y 7 • 3 fcf-j ; E- K»m^ tfy hX h y -Ai: 

+-xhy-A^HLfdg, ^©+-xf-y-A^ 
K**ifcW#(C'l'V7*v*Xa- K*#ALTes-r* 

a 1 eagwt. HuiBffi 1 immm-eftmztitt-x 

t*'J-A*i»0*-1Ml!:»LTflHWbLfeas fl» 

fb^nfe^-x h y-A^iBgij©*-iffg<hS#©+ 

-1»at!:»LTa^bLTfiaS-r**2fi2IBMts 85 

E«2eagw"pgassftfc*-x h y-A^-rvry 

-?X3- K(E»J6LTs IBMHi©*-fll«Jc»LTflH3- 
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it Ltc&, Mies i immm-z&mztitc tr-> hx hj 
[0 0 4 6] zzmmmmiM. mmmmzimtf 

^7LTSM^> if £?ft*: If-;/ KX HJ- A (S 
KS(BS)+OSC AK [ E G(KS)])^ tT<> hXHJ-A(S K S(BS)) 
£ *-x h >J - A (DSC AK [EG (KS) ] ) z^m Ltcik, +- 
X h 'J - A (DSC AK [EG (KS) ] ) tfftMZ ftfcgBtffc, ■< > 

mm-?ft%tetirz*-z h y-A(Dsc AK [EG(Ks)])£g 
nm^immizn^Xs i iiBg^fb* ftfc*-x h u - 

A£iil<D*-1flB<!:MPEGtf'y hXhy-AldttL 

HtSftfctfy hX HJ-AtSKStBS^xX^^/U 
1-£^{b&P£<!:, £#A/?V3„ 
[0 0 4 7] ^^ICi^TVy^^^^Xxi*©^: 

aiiKso-ii^Rs^^^tis x <? 5 > ?7b* ftfc 9- $ 
ft A7D ?ft * <h v MI 3X -? 7 v TV I/* nfc 9- * * tf » 

fc*-7. h >j - A*a» Kjz*-w&m\m u «h* 

-MtX^7>^HT, TVxyUfgKKxVX 
^U-f-rsSfeBWi* X-?7>?/l/*ft/cT— 
73*ft*<!:, t? >y hX h y-A<t*-X h U-A#S£ 
* ft/cX? 5 > ftfc 5 s - * ttffl?, IBSttttKIB 

mnin^64y, huibs^^ iBagN 

C t ic «fc U ±IB g ttflHlfiK* ft*. 
[0 0 4 8] £3£ffiBtt?& SufBSSISIlt*. #18 
£ft/c*-Xhy-A?\ MPEGfcfv hXh'J-AU: 

U Wgs*ft/c*-1fS8T% rX*7>7;US3£«ai 

1"*= 

[0 0 4 9] $*^Sgfl?^T-li, ffilBIBa&flrcKStf 
HTLTBSfcfrd^ WSSftfctfy hX h y-A(S 
KS (BS) +EG (KS) ) * tT-y h X h y -A (S K s (BS) ) £*-X 

h U - A (EG (KS) ) Ktfgt LfcfL *-x h y - A (EG (K 
S))s!WMI*ftfc»»lC, -Ox^Xn-KI DX? 
»ATS#«ai*i:. luB»Ii«PS-W«7rftfc*-^ 

h y - A (EG (KS) ) «• i»(D*-fl| Sfc*t LTn U^b/ 7 

;u=ry XATWWkf *BMfts«ifc, fnarefbiMtt 

T 2 @Bi^fb?ftfc+-7. h y - a*. 

£ M P E G tf y h X h y - uztt LTHmttZ ZtlZ 

*y» *-ira*wwr saBtiJuiaurp 

WR*ftfc*-1t«E*Jcv^ ffiE»«*ftfety h 
XI-y-A(SKS(BS))^xX^7V^/l/L7, xVX7 

2>o 



[0 0 5 0] *»liSfcJ:3x*5>*;UI^5/X7^(D* 

rppcj =e- K?**fr*fiiair««»jaPBt, mib 

WSUaMT [PPCj *-K£MSJ*ft*£* I3«§J<D 
^-IfSStcfct LTMIB+-X h y-A*a»fbLTe2i 

-x h y -L>ztmm<D*—mnztt LTftwt ttc 
^b*ftfc*-xhy-A*-fVxy^X3-K 

KS*JE-r*ffi«KfflALT» tf-y hXhy-A(Dcfe3lc 
13^ji#lclBat-*mi IB«SPi<!:s tulBfJSUISIlT 5 
r/W? 7 j ; E-Ki:¥iJSiJ*ft*<i:, i# 

A£2@«*fbLTg3fr**2gaS«|B£» Mf3m2 

€aawpe3s*ftfc*-x h u-A*. iB^fljo*- 

1W8IE** LTBi^lb Lfeft» Bi^fb? ftfc+-X h y - 

A£-r ^ xa - KizoM&r sissies a lt tf 
f- x h y - Aoj: 5 iciB««tt^iBa-r *m 2 tBSispi 

i:. fr6&-3Tfcyx ; ?-<7)£<!:lc<fcy±f3ai$tf»Jt2r 

ft*o 

[005 1] $*HM$MT1*> MfBJ1 1 e^SPtli, 

a»o*-«aA kt=»LTBW{k*ft/-=*-x h y- 

A*i#©*Hf«AkfcttLTa»fl:U ?Stcf3« 

fjo*-'ft$BA i K»LT«^bLfe», eas-r*. 

[0 0 5 2] *4SJBB«TH:, MIBm 2 £3gtN& 
a*0*-1t«A kfE»LTB»fb*ftfc*-7. h y- 
AS. i#0*-1fffiAklc3tLT2|Hia^bU ?6 
lc|3^«<7)*-1f?BA I ic»LT«^bL/-c«eai-r 

*o 

[0 0 5 3] *»WlC«fc*7 ? -r^;H8MH->XxAOT 

asw6tfai¥iWih*aw:» fB«ji#cDs^B$ic+-x 

HJ-A(EG(KS))6Wi£ft*<t rppcj IB^fti 
fJSOLT, *-Xhy-A*i#ffl*-1taK»LTIt 
mtLI&L i#0)*-flHB?a*LT*-1lW[**!IW 

U W«*ftfc*-«at'fVTy^X3-K*ffl^ 
T. tfv hXhy-A^xX-?5>7;u-r* rppcj 

fc*fLTa«fb*ftfc+-Z h y-A(DSC AK [EG(KS)]) 

flSULT, i*£K««©+-irafc»LT20li»fb 

W»*ftfc*-1Mit-r>Ty^Xa-K*^Tt;y 
hXhy-A=&xX-?5>7;U-r* Wy/?7-y7. 3 
tT-J =E- KS^SPgi, 6^6SoTfcy^ *©Ct(E 

[0 0 5 4] *«WK«fe*T-f5'*;UBMH5/XxA©^ 

LT R S x=3- K-r*aiSSt^yfIiE#IS<!:, SufB^ 
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«ffll**tfy hXhy-At*-XHJ-.UE»IILfc 

«BS#a* v 6a**ti.5e*y hx hy-A^xx-s^v 

[0 0 5 5] **HJBE«?B, &Etm&tfK»JI]jE 
T, MlBXT-ha-K7MfBx3-^#&©=lP-Xh 

[0 0 5 6] S3Jtffigffi?& ffiEttHStflRyfliE 

[0057] lozmMBM-Z'it. mm? urnm/ 

B^«iMB«*ftfca¥Ri5±#ao+-^ h y-A5 
-f >£XT- ha- Rcig«-r*££t,fcl?y hX h 'J 

SSfcTa-y^WeSWLT, MfBXT-ha-Ktf 

»¥I«±*OT13M>*-X h y-ASi*<D*Hllffl? 

[0058] sssfflgfrcti, miBflrei&ihfttis^gt 
rppcj ^-KcEaawwaRtcx-f^^^Ea 

i#0+-1taTBH^kLT» XT- ha- K'MESS? 

So 

[0059] sssffiHrra. mstmsikxmEm 

KtV *J*i\>E»/m&£m<im£.y t -Zfrz>4M Lit 
7-h3!i-K'sfiSltT*'. 

[0060] «sntt^ffi?». iuiB«¥i5S±saa^is 

(4x 77- h a- KH*0*-flHB*E«rr * RAM 
t'Ji« MIBRA M<0*-1WBTI9E7 , ;nry XASfS 

[006 1] S££fffl?ffi?& 1513X7- h*- K 

tfv hx h y A©*<oa*fb7;u =ry xumv^ 

mtTlW) XUluV=y A*BS«r «» 2 7;Hf U X 

umy«ufc, i#ffl*HW«nw*ROM*» 

ffcOXT- h*- K©*-1f ?B^-^Pfars RAM 



[0 0 6 2] *5MBtcJ:«7 f -f 5?*;H(M»->XtAO^ 

HB<DS£x~ 9*\2<y hXh'J-Ad:*-Xhy-A 
tc«« Lfc*» ««*tlfe*-X h y -ASHWfbf 5 

*iw?i»ihii«#at» imb* 1 m&ika&m? 
©*-««tE«LTa«fl:r*«K m2X7-ha- 

K<k. MfBM 2 XT- ha- Kfcrt LTeai* titcmZ 
Ml XT- ha- K©+-X h y-A*g#©*-flW 

wwftuti, n»{k**ifc+-x h y-A*#«* 

ftfclfy hXhy-Aiitlc. JS2tV5?*;UB«/ 

[0 0 6 3] £3Jtffi?Bflg-?& scibs 1 m&itftos 
*-XHJ-A*i#«D*-flMAkfc»LT 
IWfcLfcSL SI1X?-ha-K'M3Mf3= 
[0 0 6 4] SSSIflHBJETBs MIBm 1 XT- ha- 

Kit rp p c j =e- KT-fesBt, s 1 mwm±mm& 

fS0)*-X h y-A*i#<D*-ni«£IB«HII©*-flt 

miztt Lzmmt uafc % 2 xt- ha- K^ear 

[oo6 5] ssssmrra* (uiBm2a¥i»±sas 
#st*s & 2 xt- ha- KTesi?ns*-x h y - 
a*. m<D*-m®A i K»LTi«^kLm mi 

ttSlftifcfflS^aatfy hX h y-A£B£T«. 

[0066] ft«ftfl^»i?» % MiBm 1 xt- ha- 

Ktt mv97<v7' ahf-j =E-K"?**£*s Jg1 

«¥R6±fflJi#s®*-x h y-A*» §#<D*-iffg 

K»LT2 0«*Lfe«» E«II<J!>*HMIHe»LT* 
[0 0 6 7] SSUffiJfJSIT-tct. SES2»flftjhttS 

#ist=Cv »2X7-h*-Kfrseassti**-xMj 
-A^i#o*-it«tc>itrLTBi^fbL, *©«HWb* 
*ifc^-x h y-A*tf-y hx h u-Ata^-rs. 

[0 0 6 8] MiamK ^2^¥|!S 

XT-ha-hTO<D*-itffl*ifa-r 

SRAMi, BHUb^UdT y XA*» Z7)WJ X 
ABfK^^yt» MfBRAM(7)*-'|flB(cJ;oT, MIB 

z^ny xas?m^< ^ y <DBi^fb7p 9? kzmnt % 

[0 0 6 9] S5*«iJB«T'tt. MIBMK 12X7- 
ha - Klfc hX h y-A©fca6<oa*fk7;b jy 

XAyp^A*iwr** 1 ^i/^y XA»By =e y 
i#©a^b7;udryxAyp^7A*fB , K-r*JS 
27;ujyxA»K/ : Eyt, i#o*-it«*Bfar 

[0070] 
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[007 1] *»«tt7V5>*/l/«*«iattfttfB£L 
[0 0 7 2] ffioL *56W©3tM«(4H7Ic5?-rJ:5 

mnat^ y itiebp 1 1 , fx^7>7 u > ?it shes 

•5^TMsB«HSt^yiIiESP1 <0aj7D*rX^7>7 
^t5ATVra-<r2i, X*5V7VI/;2rftf=SEiKI 

<t> CO«¥l»±«BlW4T»lll*hTW*fk*tlfe* 
-X h U - ASO-'flufB A T V xU -if 2 (D-f>T'y * X 
=l - K*8» LTMlB A T V 7 s 3 - ^ 2 fcxX ? 5 > 7 

y v^flHBK s*iii*rr*x?- ha- K3 t*»s«Wt 
r*. 

[0073] RtlStt7R&±«raffi4 8 KjjVT J: => 
IC X7-hA-K@W<0*HIW£Ri«T*RAM1 

»1 8 is M IB RAMI 7©+-1«B?«E7/Hr'JX 

1 6 £#smdsr*. 

[0 0 7 4] M§BX^-hA-K3{*09tC;jVf J:? 
tts tf y KX h 'J -AflDfci&flMMfcT'/HJ'J XLtStf 

KTsfciT^yxABBSM 2<t, ^srammtT 

i#©*H8«*»K**ROM1 4£, ffiroXy'-h 
*-K©*-1WH*-RBfKr*RAM1 5<h, MISR 
OM 1 43§L<liR AM 1 5 tCf?B?*lfc*-'ff ffl(d& 
LTbuIBJSK n27fr3VXLSm&1 2. 1 3<DPf 

*7;udT'j xu-mm&g l < immtzmntz ?n 
-feytM 1 i^swar*. 
[0 0 7 5] c©IR, MiB^P-feytM K 1 6li9-r 
*Kn (Wired Logic)T*«J5gf SEfttT-T 
?P7P*y+^&ffll^C<ttf-(?*, 7-<^P7Pt7 
USB^S*** Xy--h*-F«Dfe46^Bg^t:7;i/d' 

[0 0 7 6] WT> C©J:d{c«WiL/-c*58W<OBlffa 

[0 0 7 7] *««?MPEGfcfy hXMJ-AtfBII 
1 (a) TiS (c) 03&o%7*--*y y-TGa&Zti* 
t\ HI 1 (a) «X?5>7/US*lTl^l^*-7 
yhWJ, Hi 1 (b) l*fc*yhXMJ-.McSLT 
X*5>7;l/**lfc7*-7y h?SV. 01 1 (c) 
lit? y hX h y-lK<«H?«IcX^7>7;b**ifc7* 

[0078] *SSMiMPEGe7 hXhU-Altitf 
LTX* 7 >7Vl/* tlfc**, £A,a«fl»?fc«ll (pro 
tect ion) £M»r*. 



[0079] SEoTv «9lftlh«1384 izm 1 1 (b) 
SL<tt (c) <D£o%:7*-^y r-(DX?7>7;U* 
ftfcX h (SKS(BS)+EG(KS)) A7J**lfcii 

01 OKtjVT £5KX7yy$(Splitter)T1II1 1 

(d) (e) <D£ors.¥v hXr-y-A(SKS(BS)+l 
DX) £*-X h y-MEGKSHcttSiU E«t- K£?t 
5 i:, iSMBSWiS- *lfc*-X h y - A (EG (KS) ) * 5 K 
Bi^kS-tlTX^- h»- KS^eaSSft*. 

[0 0 8 0] CZT\ H11 (c) tC^TcfcolC, fcfy 
hX h y-AAWMtcx^5>7;l/T*-ti/i:Ji^lcii. 

[008 1]$f,H11 (a) KSWJ:3fc % X^75 

vTVustiTva^tfy hx Hj-Atfeashfcii 
aBHftuwypiEasiT?»niai«B#*hfefcry 
hx h y-A*ra^±ffl3S4fcA7j**iTt»x^- 
h*- F3^x-^^ES-a-r; MiB^rastfissyrriE 

flMQtfy KXhy-AtfAJjJftfcATVxP-' 5^2 

ttuiBXT- ha- K3ICT-1 **earr «E tf 
y hXr-y-A^aw^o fifoT, a»ar«*¥iEfir 

[0 0 8 2] t:i!T\ *3.-i-frSWm&XMVtIiE& 
1 fcA7J*ft*ffl*£AT Vx3-tf 2frStii7JS*lS 

-7-^5 ffl7J*ftSflrett» GAtfy r-Xh'J-AfrS 
£0VSBfI*Mflf?$5. *L7\ Atti7Dfi^© 

5-5, ify hXhy-Att^-xhy-Afir-r^yu 

DVCR0fc«XDxVv'^;Wi^T-S^o Cfl)i, 13^ 
*fr 3 1 , r -f S?* ;U V C R (c If y h X r* 'J - A A^IB» 
£:OfB^?n/i:ey h-X h y-^ttHSttar-f 

^;uvcRT«^ti5„ o*y % x^5>7'yv^ 

fffrfrGttl^M PEG tfy hX h y-A6WRS±5aS 
S?4lz:A7Jv*-nTs 01 0|cSfJ:5fcx7yy*«ji 
i§LT i fe*-1fffl6m^ci&ltX^- h*- K 3^631 

[0 0 8 31 IN. »ilgL<l*S¥|5S±«S«6 
*fT?«^» tfy r-X h y-^t*-x h y-Aic»ss 

dditional Copy lnfo.)7-f;URc«*6hTffiaJ*tl 
[0 0 8 4] CO|» % nt*<b*hfc+-tffti/**5:/ 

^a^Jf^Ct*, kfy HX h y-A*rX*7 V^/U 
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^.xmwm±(otcmzM p e g<sm7p nwi/Tffit© 

7-r/l/K*ffll^5!b\ X^^UStl/cfcfv hXMJ 

[0 0 8 5] £1\ TTransport-scrambl ing-control7 
-fiUKj * TNot Scrambledj FKSaT£lrt& 
T3-#2TM:, t**5 V7'J ><f*fit>lZWT\ 

Tmmmmitmmy <r n K*sftT* c t 

-5 &a¥Rfilt7j?£(i, TTransport-scrambl ing-c 
ontrol7<;UKj tcJ:^T^i¥K±?tl^ J^lcT^ 
*\ SBfttJt^RTflB (free-copy) £fc*J: 3 

[0 0 8 6] 3Wc, *asflBB##PES'v.y$frtfl!) RTf 

JD^¥1f$S (Additional Copy lnfo.)7-fA/Kj *<«iE 

[0 0 8 7] c©«fc5*»««rr**wiiKJ:"3TS 
«*ft*»sisih*ssH\ c awetss ppv (p ay p 

er View), P P P (Pay Per Play)«IB*7 s 7*-;l/KD 
efault)<tU OtoCopyj £26, rppc(p ay Per Cop 
y)j TBack-up Copyj ££#83. 

[0 0 8 8] CCT, TNo Copyj 3EStt % ft&Otfxtf 
x-7-?H¥*£< 7**1** 5 KT 

rppcj TjStt* i laia^ciKSdSgttatiO?* 

y, TBack-up Copyj -#K>7V5>*;i>VCR 

;u V C R ■W>*jE««l=«a?RT|g?» y > ffeffl JOtV 5? 

[0 0 8 9] SAT. *»H<0»IBJt35afttf*tUcJ: 
«M P E G tfy hX r- U-^dDSHV^B 1 971SH2 2 

[0 0 9 0] BB1 96*1*2 Ott, K*BL<ttS£* 

-KeK«^i«±«Biaw)ttftK»r5fli<Hi»iia?* 
y» H2 1 imimwy5±mmmzftiztzx^-bt> 
- Koiw^ics-r sffl^apwa?* y , ea 2 2 latane 

[0091] mi 9com^n^mmt^ 0 

*-1fSB#£oTX?5>7VU£tifdi^ SgKDSB 

?**^s^w:a^«iB?**^«*ij»jr* (s 1 0 

1) o 

[0 0 9 2] BP-Sx 7757 TVUSftfc x- £ 4)if £\ 

e-> h x h y - a (sks (bs) ) t *-x r- y -a (eg (ks) ) 

©#iHKJ:oTSKS(BS) + IDXJB<»<DX h y-^TGiM* 
tt*fr£-5fr*j£P}sLT, S K s(BS) + IDXfl5^<07 HJ- 



mwmmtmitz (s 1 0 2) „ 

[0 0 9 3] CtltCcfcy, ««»HtW»J*tl/-cJi^, 
V C R 5 7*|fy f*X I- y -A<fc*--X h 'J 

ntcz b y - a (sks (bs) +eg (ks) ) ^-yizmm l ( s 
106), w.wmmtp\wi-$tirc®£, *-xhy-A 

(E6(KS))fl«»»*tlfebfy hXhy-A(SKS(BS)+IDX) 

sea* wmwm±mm® 8 tceasr * <t <t t ^ he 

*-Xhy-^(E6(KS))**-flffiAk(C»LT» *S 
KflWftLfc* (S105) , *©B»<bS*lfc*-X 
h 'J —I* (ESC Ak [EG (KS) ] ) *X7- h K 3 *fl- L 

!3Siffl!l<D VCR 9?-x-7Kf8jIj-f Si! .hle&i, (S 1 
06) . 

[0 0 9 4] mz, H2 0(i» 111 9<DJ;?&<f^-3Sttt 

h'J-^A***i*i: (S107), +-XHJ-A 
*»«LTW9JT«CtJEj:y (SI 0 8) » Siiatg 
TBack-up Copyj rSS^^^^SfOSJ-raCiklC* 
5 (S 1 1 0) „ 

[0095] zam. mtmm (sno) 

Tc*-Z h y-A(EG(KS))#£ffl*ft«£«|Qa!lT- 

rtnar*. ^ i#flD*-iii«Ak(!:»LTa** 

tlfc^-X h 'J — i* (DSC Ak [EG (KS) ] ) tf&tfl * =H5 1 . 
P P C«l6©«BT-7'i:WSiJU fflCDX^- h*- K 
0+-1WIA I JC»LT«**tirfc*-Xhy-i*(DSC 
A|[E6(KS)])fl««tffl**l*^ TBack-up Copyj ttflgo 

It. -1BmfiT--7a>m£lzU:s ¥v r-Xhy-A(B 
S) a¥|56±ffl»ilx-7<DJi^tcti, *-x h y 
-yA(EG(KS))6^||?tl/cb:-> KX h y-/,(s K s(BS) + i 

030*7*3 ?2lzBm?Z> (S 1 0 9) o 

[0096] ^lt- wm±siBm4UM£mitma 

llix-70S^BtlCBack-up Copy^^fiffl^tifcli 
*-X h 'J - A (DSC Ak [EG (KS) ] ) * g*<D+-1f IS 

a kiE»LT*^b7;udryXAESc Ak ( . ) 7-2 mug 
^fbT^5 c£(cj:y % ^fb* nfc*-x h y - a (esc 

Ak[E G (KS)])*X?-ha-K3(ceiiL (SI 1 1 N 
S 1 1 2, S 1 1 3) % Back-up Copy«tt6fl«affl*nT 
l^t^v +— X h 'J—jUJa (EG (KS) ) * g #<D*-1f 
«A k^LTBg^fb7;U=ryXA(ESC Ak ( . ))?B§4f 

fbf 5 z: «t tc j: y , ewflrfr*ifc*-x h y - a (esc ar 

[EG(KS)])*XV-ha-K3'\eiM-r^ (SI 1 2, 
S 1 1 3) o 

[0 0 9 7] BUlBOd;3a«)fF*a¥i!S±SaSSI547fi 
otZ. X-7-hA-K3(i02 KOJ:5S^3Sti(3!) 
mm'no. £ft*f¥L<lJWf £><>:, MIBXT-h* 
- K 3 li)K5Mg L < ttS£*fj? C t (E J: y % xzi-^ 
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2T-Y>77«a-K I DXSL<li*-Xh'J-A 
(E6(KS))3(j«A»**l**»^34i^WH|-r* (S 1 1 4, 
S 1 1 5) o 

[0 0 9 8] COB, -f>ry^X3-KI DXTttft 
1>*-X h U -A (EG (KS) ) t , PPVmtfc 

fiDttaawtwjLfca?- ha- K3tt, ffjie*-x 

h'J-A (EG(KS))£tfy h^hU-AGAlcMf «fl 
^b^UJ'JXADfi (•) "WMLT (S116), 
*-flHBKS*7 ? 3-^2{EA*a:-e-« (SI 1 7) . 

K S «*|R LTtW5>^U >?»a*«ffl u *o 
«BI*ftfcT**5>?U >^f35SC7ty hX h 'J-A 
(Sks (BS) ) SrX* 5 >7> LTT^n 4fe :5**fl»» 

asssswrsc 

[0 0 9 9] mB®m (SI 1 5) ?-f>T9* 

X3-KI DXtfA73*ftfci:fyHI**l5t» 7. 7- h 
*- K3tt**ffi±*raa54?A73*ftfe*-* h u- 
A (ESC Ak [EG (KS) ] ) *+-flHH A k LT!MHfc7/U 
JUXA(DSC Ak (.) )?8»Lfc« (S 1 1 8) , H£ 
«f^if« U < ttEWBrf^ ^**U8'J-r * (Si 1 9) . 

[0100] cob, Miaspg (s 1 1 9) TS4»ft 
t«9J* n« x?- ha— K3 wawfl:* nfc*- 

X h U - A (EG (KS) ) * tf y h X h 'J - A G A left 1 «fK 

mi7)\>3vxj±afi{-))-w&LT (s 1 1 6) , + 

-HHBKS*7*3-4r2KA**-a:* (s 1 1 7) . c 
tilery, rn— ?2t*xv-ha-F3o*-lf$BK 
S«WRLT, TX^V^UVfSSfcfflMU *0 

■zftmztitc if* h x h y -a (s K s (bs) )?xx^7> 

»r*ct(=J:»J, *Sli#[ix-7 0 0l§iIi7 p P7^A£ 

[0101] *LT, MIBISPg (S 1 1 9) TEflttff 
£«BJ*h*£» X?-h*-K3tt TBack-up Copyj 

«t6T**^^3^*wayr* (si 20 . r Ba ck-u 

p Copyj Htt?&flf& *-7shy-A(EG(KS))*+- 
1MIA McfcfLT, «^{b7 7 /HryXA(DSC Ak ( . ))■? 

a^kL (s 1 2 1), a%**iftt-7hu-^ 

((DSC Ak [EG(KS)])^*-1f^A I KftLT, ^{bT 7 
;Ud-yXA(DSC Ak ( . ))-WLmiT*Z.b\»l3iZ (S 1 
22) . 

[0 102] COB, X7-h*-K3?a»flrfFtlfc 
*-X h y-A(DSC A | {DSC Ak [EG(KS)]})^fB»fJWE3M 
*n (S 1 2 3) » XV- ha- K7*^-LTa5B5± 
»S6B8li:A73;*ft*£ (SI 2 4) , VHtTl^'J 

X^(ESC A |(.))-w»fl:**i«. ctu^y, xv- 
ha- h7tini^b?nfc*-x hy-A(osc Ak [EG(K 
s)])*-e>r>^a-K 1 DXfi«ajtf sffimcaA 

**TW^«|flDa¥fi6±ft3a8JJ4/r6aj7J*nfclfy h 



x h 'J -a (sks (bs)) tmstzts v c r 9 tt-7 
ttsis-rsc^tcs^o 

[0 1 0 3] -75, mmm (s 1 1 9) z*mm®ttt 

MBIStU M-PMIBISPg (S 1 2 0) ? TBack-up Cop 

yj «ii?ttft^p p cmmtmmztitctmttti* 

<t, XV-ha-K3tt % +-XhU-A(EG(KS))^+ 
-«« A I KMLZ9.mt,7lU3VXl*Q>Xu (.))T 

a«fbL (S122) , ^oa^fb?n/c*-xh'j- 

Zx (DSC A i [EG (KS) ] ) SKWIJ^eSST* CiJC&S ( S 
123), 

[0 10 4] COB, X?-ha-K7£ftLT*-X 

h y -a (dsc a 1 [eg (ks) ] ) <o\tt&mamm<DW* 
m±®m®8tt, Bg^fbz/udryxAESCyyi (.)?b» 

<bLfc&, *OIW{b*tlfc*-X h'J-Zx(EG(KS))* 
-Ox^Xn- K I DXtf»£T*™«:SA*# 
T, »SflJflMi5IW±Ja3iaB4fr.6lil7J*ftfEfcfy hX 

h y - a (sks (bs) ) tmstz ctttz. 
[0105] ft-p-c\ a?i»±iraw8^6ia73*tifc 

tf y h X h y - A (SKS (BS) +EG (KS) )ttVCR9fc«fc-3T 

[0 10 6] ±j$LfcJ:?U:, ^fPJm^TOXV- 
ha- KtfM PEG tfy hX h 'J -AtdtfT ^Bi^T 7 

;udyXA(EG ( • )) twaKruivxi* (sfi ( • )) 
ie» LTftiioz/nry XA&rjftiio*-£}to 0 

[0 10 7] *LT, X7-t*a-KK«r*BH^k7» 
;l/dryXA(ESC A) ( . ))<!:«^k7 7 ;l/d 'JXlx(D 

sc Ak ( • ))ti£TcDxv- ha- Ktfftao7;ujyx 

Afcftoff, *-1fffittXV-ha-Rc«fcoTMS 

?%mm*—&pimt z c t ica*. 

[0 10 8] ffiE©*5&«ltt*fTdfcafcy, UE¥R& 

isasgBixv-ha-KP^ x^-ha-K<hxv- 
ha- micm¥*mmLmzmmwsizf*-*3m 
rzm&tttstomawtimsv&Zo cob, bse 

mmitD E S7 7 ;UdfyXAOJ:3S^*-7;l/df'JX 

A£ffll^£»^, R S ACfcofcy^y <y 

dfj XA£ffll^£&^, F S (Fiat-Shamir) Scheme* 

[0 10 9] *»iP3Ttt» /\°7'y-y7*-7;Ud'JXA 

0#J=&H 2 2 ICS LfcA\ C O «fe a STJStt/ \°x >j » 7 
*- (n, e) ZWSEL£ottZ*-%m^m2 0 1 
t*-e3S#S2 0 2tfft£LT^;s<h^5iMi©t, < !: 
T\ @ffl-r^Ci:tc^5„ 

[01 1 o] cob, *-§<i#ig2 o 1 imwm±m 
m$im l < ttEfflBcx?- h a- k i y , +-e 

iiS#|g2 0 2(ig#OXV— ha— KkT*£?„ 
[0 1 1 1] J-XT, BuE©«fc3S3iftlT'«lf^r«*^ 

©UttflfcHl 271SB1 8^#BBLTlKB^-r^o 
[0 112] *»WPttHl 1 (a) OJ:^&X75> 
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-s, mi nzynTkoicmm^WittTziD-es mmRzf 

m V fTIEgP 1 T-MH&tf R S t 3 - K* tlfc e y h X 
h U - A tfxa 2 h« [z «fc y % 77-p ? fcT 

[0113] faaaa^ ttms^MuujEa! 
1fr5iB7JS*i*fc?y hXhy-ABStt, ai:i»±a 
SSB4^LTVCR5T-7 1 -^E@^ g£<DJi 
VCR5TBS*tlfci;y HXh'J-/»BSfl«ai: 
B6±«aa54«^LTra-4r2H:A***iTa***i 
3 c fc £ J: »J 77-P yifT^atfJj— 5*-f *ffi^tftB A 

^r- S*£ajALSlvD?\ *!II&mt¥lEfJiF£4;L 

[0 114] ^-LT. H11 (b) Xtt (c) 

x^5v^;u*nf=(f^ hxHJ-A#AoT<sJg 
1 8ojc54Hiff*fTa. 

[01 1 5] snr\ p p v«ig*fi3««, mi 3©<t 

x h y -a (srs (bs) ) ^m^ksrttfc*-*. h y -a (eg 
(ks) ) tfeass ti« t , tm&tflg y itiesp 1 »sh$ 

ftfcA7J«*5r»I R S fa-rV >^£fl-L 

Teasftcsss Lfc« y ^triE? 3 ^ £ {e&£ 0 

[0 116] C« x3-*2!(«IBiaiflKyffiEff 
1©tiJA (SKS(BS)+EG(KS))©d^, +-XHJ-A (E 
G(KS))£#S|LTX?-ha-K3Mi*j-f*^ X^? 

- h A- K 3 liHulBBi^fb? tl/c*-7> h 'J —A (EG (K 
S))*a*LT*-XhU-Z»KS*«HB7 r 3-^2K 

- K 3 ©*-X h y - A K S LTxX?5>?y 
> tf&3**lffl Lfc«, tf y h 7. h y - A (S K S (BS) ) * 

are- LTTi-uv^TtmmkT}*-?* *\m-*m\ 

[0 117] 09O«J:3SX7-|-A-K3tt 
£lEfc*o 

[0 118]-*, X^7>^U**lfce>> hXHJ- 
A«*«JfcSirr*Jg^ Hi 4©«fc3fcflHBHi?ii 
frt36\ fiSSStlfetry hXh'J-A (S K s(BS)+EG(K 

s) ) « * vm&xm y rriEgp 1 T-amsi? r s ?a -x 

^LT V C R 5 iCA^^tlTx-^tcSBSn^c 
[0 119] C©«fc5K«H*ftfcfcfy hXhy-A£ 
W£.t2>m-&. PPPIi?£St^ El 1 5<DJ:535: 
imy&1x-?W}ttTZ>h\ V C R 5 t? v hX 

h 'J-A (SKS(BS)+EG(KS))fl«?|»ihS!Bl«4lcA*J 
* *i* £ , «¥RS±SQSBI3 4 ttSatrtifc tf y h X h U 



-A (SKS(BS)+EG(KS))^bfv hXh'J-A (S K s(BS)) 
t*-Z HJ-A(EG(KS))t«:#«Lfc«s K»B»ft*tl 

fc*-x h y-A (EG(Ks))^Bi^b7;u=ryXA(ESC 

Ak (•))T*6KIW{kLT» X^-hA-K3^ai7J 
U «K»H**ifcfcry hXhy-A(SKs(BS))tt+- 
X HJ-A (E6(KS))*UyU**lfc»»fE-f>Ty^ 
X3-KI DX*ftSLTra-<r2'MH*r*. 
[0 12 0] C©R, T3-$r2£frLTf>T';>?X 
3-KI DX©A73*SW-fcX7-hA-K3tt, W9 

i»±sra*20B»fb*tifc*-x h y-A (esc AR [eg 

(KS)])£XT- hA- F0/ci6<Wi^b7';l/d , yXA(D 
sc Ak( • ))?fl»LT, rX-?5>^y VTflHSTfc* 
+-X h y -A KS^tufBr 3-^2^73^3 (SI 
17). CtlKJ:y, x3-#2ttXV-hA-F3© 
*-X h 'J - A K S «ft|R LTtX^7>7'J > ?7J5£ 
«W»J LfcfL «9l»±fflSS 4 LT A7J* hfe t: 
yhXHJ-A (SKs(BS))*a*-T5CtKJ:y, 7t- 

3o 

[0 1 2 1] f LT, m 1 4©*5&«*3»l-WMBS 
nfcx— 5?^S3VCRT^Bf HI 6©fl 
^■3Stl©J:5lCPPC^^3^ VCR57-SS? 
tlfctfy hXf-y-A (SKS(BS)+EG(KS))fl«aii:B&±ffl 
SgB4lEA73**l3<!:, ffl¥K±SaSg|54ti, bfy hX 

hy-A (sks(bs)+eG(ks))^, try i*xhj--a(s 

KS(BS))<t. *-Xhy-A(EG(KS))i:K»Wr* 0 * 

©a. MtB^iis*nf ; :*-x h y-ASEWfb^udry 

XA(ESC Ak ( • SfcBS^fbLTX?- KA- K3 
'NHIAU ffiE»«**lfclfy hXh'J-A (Sks(BS)) 

i*-x h y - a (eg (ks) ) a^is y us hfcawtE-r >t* 

y-7X3- K I DX*^LTEafflOlt¥IW±«BiaJ 

[0122] z.<m, siijox^- hA- F3ii, a 
^K±jaisgB4z 5 ai^fb*nrc*-x h y-A(ESC Ak [E 

G(KS)])*R AMlE|fi'«*hfe*-flHBA I KStLTS 

^b7;u=iyxA(Dsc A | ( • ))-e«*Lfdk ^oa^ 

*nfc*-X h 'J-A (DSC a) [EG(KS)])^IHSffl©XV 

h A- K 7 A^fJOXT- h A- K 3 
-7. h 'J-A (DSC A | [EG(KS)])©AA^gltTfB^iJOD 
ffl¥E6±SQggP8'\tlJAt-3<!:, WMWm±Wm 8 
(*MIB*-X h >J - A (DSC A | [EG (KS)] ) ^Bi^fb LTtb 
©fl»fl:*tlfe*-X h y-A(EG(KS))(Ea?uL/c^ 
-Ox-y7X3-KI DXtE«fc-3TS£#J©«¥B&it*a 
SSP4A^6aJA^n/cbfy hX h y-A(GKS(BS))(E;I 
*LTVCR5'\ffl*r*Ci:(E<feyx ffl<7)x-7"{E^ 
Hf 3il<i:tE%3o 

[0 12 3] zo&ormv$-?mmiE*itc : r--7Q> : T- 
*t*ppp«we*afflLT, Bi socfedSffl^-sifnT* 
ssr*ctfl«T*«. fa. mi 4©*9&fl»9Mtt» 
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«H*ftfc7*-**f6<&VCR-WMM-3»£» Ell 7 
©#^3Sn<D<fc ? (=Back-upCopy«|g«fT? £ fctf 

[0 12 4] VCR5?S*fe*tlfcfcfy hXh 

y - a (s K s (bs) +eg (ks) ) hmwm±mm%i 4 

*l« <k > «¥R&±jKlS 4 tt kf y h X h 'J - A (Sks (B 
S)) t*-Z h 'J -A (EG (KS) ) fctf* Lfcft, lulB^gS 

?ftfc*-x h y-A£n^b7/ud'y xa(e 

SC Ak ( • ))T**6lCBf^bLTXV- h»- K3^aj7J 
U MIB»gi*tl/ckf<> hX h'J-^(S K s(BS))t**- 

x h y -a (eg (ks) ) tfm y uj* ftf=aj»(c-f >t * x 

3-K I DX*#jPLTfBaMI0<D^i:|5S±«iSg|58^tt| 
[0 12 5] CflMfc S£ffl«)X7- hA- K3tt^¥ 

Kutaasa? 4 rowb* ftfc+-x h y - a (Esc Ak [e 

S(KS)])«R0MlCB?«*tlfci#O*-A kK»LT 
«^b7;Ud 'JXA(DSC Ak ( . ))T2ls!t§{kLm 
*6KR AMKBS«*nft*-1f«A I lo&LTffl^b 

7vnryx^(Dsc A | ( . ))t^lt> *<oare*nfc 

*-X h y-A(DSC A | {DSC Ak [EG(KS)]})^|BaiJ0XT 
-h*-K7fcaJ2rfSEttl;:fc«. cltilCfcy, 
fJ(DX h 13- K 3 c7)*-X h y -A (DSC A | {DSC Ak [ E 
G(KS)]})tfiaii«0X7- h*- K7«hLTEiW© 

MI3+-X h y - A (DSC A i { D SC Ak [ E G ( K S) ] } ) 
A I izKLTmmttZZtlZ&V. 7G®W*ffc*-7. 
hy-A(DSC Ak [EG(KS)])l!-^7t-r«o *LT. ffijc* 
tt7cB§^{b*-X h'J-i*(DSC Ak [EG(KS)])* % Ox 

frSitiTJ^ftfctfy hX h y-A(fiKs(BS))(ca^L 
T> VCR 9^731/?, ffi<0x- , 7'l;:«n-t*Ci:lE 

[0 12 6] C£T% 8£tt3«**lfcX7- h»- K 

3gL<tt7T'ttSW5. 

[0 12 7] £CQ<fc5fcBack-up CopyttttSfToTftH 
tt7EX--7«MLfcV C RT«)a«fr 
*E iEMMSS^Ji^s HI 8 (a) 

[0 12 8] 0*y, VCR5T?S£**lftl£yhXh 

y - A (sks (bs) +DSC Ak [eg (ks) ] ) fi^fifrtftgifl; 4 iz 
(sks (bs) ) <h*-x h y -a (DSC Ak [eg (ks) ] ) iz^m 

3„ MfB^8S**ifc*-Xhy-A(DSC Ak [E 
G(KS)])^8f^b7;U^yXA(ESC Ak ( . ))?20ll» 
<bLT> X^-hA-K3'\ttJ^U MlBttBiSftfcbf 
•V hXhy-A(SKS(BS))fi, *-Xhy-A(DSC Ak [EG 
(KS)])6^yaj**l/j:SP»tcs -f>xv^Xa-KI D 

[0 12 9] COK, 7=1-^2 ^LT-<>T'>^X 
3-KI DX©A73*SttfcX^-h3-K3(*«3PIS 



lhiaggp 2 T-Pf ^fb* tifc*-x h y - a (ESc Ak [eg ( K 

S)])*77- h*- K<0fei6®a*fb7;UJyXA(DSC 

-xt>y-AKs*Miar3— s?2'\aj7] - r«o etui: 

«fc*J» T=l-4f2tiX^-h*-K3 0*-XI-y-A 

k s shr ltxx^ 5 v?y v^sasfyai Lm 

*^l«ih*Ba»4*^LTA7J**lfeey hX h 'J-A 
(Sks (bs) ) ££^T * c <h £ <fc y » 7^- p W?*^ 

[0 13 0] *LTs ««raHStlfeVCR?tt4lMft 
<0VCR7?«£-r*#iE«»aOll^, 018 (b) © 

[0131] osy % x-7ai:^T^fcvcR9T-a 

¥7-7"£S£-f3<!:, tt¥l»±«raaB8?ttH4*ft 

5 s — * (Sks (BS) +DSC Ak [EG (KS) ] ) £X f 'J y 7 1 -T 
$aSLT. bfy hX HJ -A (Sks(BS)+IDX) £#3if 

[0132] c©Bs »8i*n/=*-xhy-A(Dsc Ak 

[EG(KS)]){4g#0*-1f$gA I K3?fLTIW{b**lfc 
tft. *6(C*-flHHA I tE»LT»*fb (ESC A |{E 
SC A I (D sc Ak [EG (KS) ] ) } ) * tlTX?- h A- K 7 ^GiM 
*tiS„ fU> X7-h*-K7tttf>y hXh'J-A 
( E SC Ai { E SC A | (DSC Ak [EG(KS)])})^«^T#*^©Tx 

Ta-*6fc*Hir«Ks*easLfti\> cnic<fcy % 
x ^- 1-*- K7 (* tr» hx h y - a (sks (bs» *tx 
<7^yzrnLt^(DT\ m9--7<on&tmtotir£ 

[0 13 3]-*, *5SWOa»Ofe46fC, 

[0 13 4] 1) BS :X^7>7;U*tlTl^ GA 
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